Set Items Description 

51 701620 WIRELESS? OR WIRE {) LESS? OR RADIO? OR CELLULAR? OR MOBILE? 

OR WAP? ? OR WLAN? ? OR CELLPHONE? 

52 180859 PLURAL? OR SEVERAL? OR MULTIPL? OR MULTIT? OR NUMEROUS? OR 

MANY OR CLUSTER? OR SET OR SETS 

53 65977 ARRAY? OR ASSORTMENT? OR GROUP? OR COLLECTION? OR ASSEMBLY? 

54 4 411 (AUTHENTICAT? OR AUTHORIZ? OR AUTHORIS? OR VERIF? OR CERTI- 

F? OR IDENTIF? OR VALIDAT? OR SECUR?) (3N) (PREFERENC? OR PROTO- 
COL? OR IDENTIT? OR ID OR PASSKEY? OR PASSWORD?) 

55 262 (CRYPT? OR ENCRYPT? OR DECRYPT? OR ENCIPHER? OR DECIPHER?) - 

(3N) (HANDSHAK? OR HAND{)SHAK? OR IDENTIT? OR ID OR PASSKEY? OR 
PASSWORD? OR PROTOCOL?) 

56 2899 CHAP OR EAP OR PAP OR SPAP OR DES OR RADIUS OR SKEY OR S()- 

KEY OR TACACS OR MSCHAP? OR SKID? ? 

57 47 (CONFIRM? OR CORROBORAT?) () (IDENTIT? OR ID OR PASSKEY? OR - 

PASSWORD? OR PROTOCOL? OR HANDSHAK? OR HAND()SHAK?) 

58 53553 HUB? ? OR ACCESS? () POINT? OR BASE () STATION? OR BASESTATION? 

OR (CELL? OR HANDOFF? OR HAND? () OFF) () (TOWER? OR BEACON?) 

59 7 523 GATEWAY? OR GATE () WAY? ? OR ROUTER? ? OR (NET? ? OR NETWOR- 

K?) {) (SWITCH? OR HANDOFF? OR HAND? () OFF) OR ACCESS? () SERVER? 

510 144862 SPECIFY? OR SPECIFIE? OR PREFER? OR SELECT? OR CHOOS? OR - 

CHOIC? 

511 136029 ELECT? OR DESIGNAT? OR DISCRIMINAT? OR ASSIGN? OR PICK? OR 

OPT OR OPTS OR OPTED OR OPTING 

512 48508 OPTION? OR SCHEDUL? OR ACTUAT? OR EXECUT? 

513 234514 SINGLE? OR UNIQUE? OR SPECIF? OR PARTICULAR? OR INDIVIDUAL? 

OR LONE? OR SINGULAR? OR ONE 

514 219506 INDEPEND? OR DISTINCT? OR SPECIFIC? OR CERTAIN? OR DEFINIT? 

OR PRECIS? 

515 140953 EXCLUSIV? OR EACH? OR TARGET? OR DEDICAT? OR DEPENDEN? 

516 229192 IC=(H04Q? OR H04M? OR G06F? OR H04L?) 

517 297430 MC=(W01? OR TOl? OR W03? OR W04? OR W02?) 

518 22 SI AND S8 : S9 ( 5N) SIO : S12 AND S13 : S15 ( 5N) S4 : S7 

519 7 SI AND S2:S3(5N)S4:S7 AND S8 : S9 ( 7N) SIO : S12 AND S8:S12(7N)S- 

13:S15 

520 732 SI AND S4:S7 AND S8:S9 AND S10:S15 AND S16:S17 

521 266 S20 AND S10:S12 AND S13:S15 

522 187 S21 AND (S2:S3 OR S13:S15) (ION) (SI OR S4:S7) 

523 27 S18:S19 

524 27 IDPAT (sorted in duplicate/non-duplicate order) 

525 164 S22 NOT S23 

526 50 S25 AND AC=US/PR 

527 24 S26 AND AY= ( 1 970 : 2000 ) /PR 

528 114 S25 NOT S26 

529 32 S28 AND PY=1970:2000 

530 56 S27 OR S29 

531 56 IDPAT (sorted in duplicate/non-duplicate order) 



File 347:JAPIO Nov 197 6-2005/Oct { Updated 060203) 

(c) 2006 JPO & JAPIO 
File 350:Derwent WPIX 1 963-2006/UD, UM &UP-200610 

(c) 2006 Thomson Derwent 



31/3, K/31 (Item 31 from file: 350) 

DIALOG (R) File 350:Derwent WPIX 

(c) 2006 Thomson Derwent . All rts. reserv. 



010896874 **Image available** 

WPI Acc No: 1996-393825/ 199640 

XRPX Acc No: N96-331882 

Access point for controlling messages between wired and wireless 
communication networks, esp. LANs - has table containing identity and 
predetermined communication parameters of each node in wireless 
network for comparing with information associated with received messages, 
only transmitting messages which will elicit response 

Patent Assignee: IBM CANADA LTD (IBMC ); INT BUSINESS MACHINES CORP (IBMC 
) 

Inventor: BAKER M C; 

NAGHSHINEH M 
Number of Countries: 
Patent Family: 
Patent No Kind 
CA 2137587 A 
US 5570366 A 
CA 2137587 C 



BHATTACHARYA P P; CHEUNG R Y M; KOBO R M; KOLBE E M; 



002 Number of Patents: 003 



Date Applicat No Kind 

19960609 CA 2137587 A 

19961029 US 95443793 A 

19990323 CA 2137587 A 



Date 
19941208 
19950518 
19941208 



Week 
199640 
199649 
199930 



Priority Applications (No Type Date) : CA 2137587 A 19941208 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
CA 2137587 A 29 H04L-012/46 

US 5570366 A 16 H04J-003/02 

CA 2137587 C H04L-012/46 

Access point for controlling messages between wired and wireless 
communication networks, esp. LANs... 

. . .has table containing identity and predetermined communication parameters 
of each node in wireless network for comparing with information 
associated with received messages, only transmitting messages which will 
elicit. . . 



. . .Abstract (Basic) : The access point includes a table which contains 
the identity of each node in the associated wireless network and 
predetermined communication parameters associated with each node. 
Identity and communication parameter information associated with 
received messages is compared with the corresponding. . . 

...result of the comparison is used to determine whether the message is 

transmitted to the wireless network, transmitting only messages which 
will elicit a response from one of the wireless network nodes... 

. ..Pref. the wired and wireless networks are LANs and the predetermined 
communication parameters define destination addresses, protocol 
identifiers and destination names associated with each protocol, for 

each mobile terminal associated with the access point . The 
message and table parameters can also be selectively compared to 
allow a desired level of filtering. Pref. table entry information can 
be transferred between access points when a mobile terminal moves 
between wireless LANs . . . 



. . .ADVANTAGE - Ensures messages are only transmitted to target stations 

which will act on them. . . 
. . .Abstract (Equivalent) : In a communications system comprising a 

plurality of wired networks, a plurality of wireless networks and 



an access point between each wireless network and a wired 
network, each said access point controlling the transmission of 
messages between one of said wireless networks and one of said 
wired networks, wherein said access points control said 
transmission by performing the following steps... 

...creating a table in each said access point , said table including 
the identity of each node in its associated wireless network and 
predetermined communication parameters associated with each node on 
said associated wireless network. . . 

. . . comparing identity and communication parameter information associated 
with each message received by said access point with 
corresponding information in said table at said access point ; and 

...transmitting, to said associated wireless network, only those messages 
which will be responded to by a node on said associated wireless 
network as determined by comparing said identity and communications 
parameters in said received message to. . . 

...Title Terms: WIRELESS ; 

...International Patent Class (Main): H04L-012/46 
International Patent Class (Additional) : H04Q-007/24 . . . 
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[57] ABSTRACT 

In communication systems which include high speed wined 
local area networks (LANs) and low speed wireless LANs, 
the bandwidth of the wireless LANs can be severely 
impacted. It has been found that many broadcast or multicast 
messages which are forwarded to the wireless LANs are not 
required as the mobile terminals which would receive the 
messages are not required to act on them. The present 
invention provides a means and method to filter out 
unneeded messages so that they do not impact the bandwidth 
of the wireless network. Each access point for each wireless 
LAN maintains a table of parameters for each associated 
mobile terminal in the connected wireless LAN. The param- 
eters in that table are compared to the parameters in message 
frames received by the access point and only those messages 
having parameters found in the table are put on the wireless 
LAN. The level of filtering can be controlled by specifying 
which parameters are to be used for filtering messages. The 
tables at each access point are maintained current by moving 
table entries from access point to access point as mobile 
terminals move from wireless LAN to wireless LAN and by 
removing inactive table entries from the table when a 
predetennined interval of inactivity is encountered and a 
terminal is determined to be no longer in active contact with 
the access point. 

12 Claims, 8 Drawing Sheets 
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It is easy to see how the invention can be extended to other 
protocol stacks. In general, the access point needs to con- 
struct a separate filtering database per protocol stack on 
which it wishes to apply filtering. The database has a field 
that uniquely identifies a network node in the wireless 
network for which a broadcast or multicast data firame is 
actually intended. 

When data frames are received from the slow wireless 
network, the access point examines the data frame to deter- 
mine to which protocol stack it belongs. Then the access 15 
point checks the corresponding protocol stack* s broadcast/ 
multicast filtering database to determine if the unique entry 
for the source network node is already present. If the entry 
does not exist, the access point creates it. 

When a broadcast or multicast data frame is received from 20 
the fast wired network, the access point examines the data 
frame to determine to which the protocol stack it belongs. 

Depending upon the protocol, it finds the Name/Address 
associated with that protocol included in the frame, then it 
goes to the table to look for the Name/ Address associated 
with the access point. Then the access point checks the 
corresponding protocol stack's broadcast/multicast filtering 
database. Only if the Name/Address was found in the 
protocol stack's database should the access point forward 
the frame to the slow wireless network. 

If the access point is informed by another access point that 
the mobile network node has moved to its vicinity and 
registered with the other access point, the access point will 
deregister the mobile network node and forward the entries 
in the protocol stack's broadcast/multicast filtering database 
that are associated with the mobile network node to the 
access point with which the mobile terminal is newly 
registered. The deregistering access point will also delete 
those entries from the protocol stack's broadcast/multicast 
filtering database. 

Each protocol stack's broadcast/multicast filtering data- 
base has an expiry counter associated with each entry in the 
database. Whenever the access point receives, from the 
wireless LAN, a broadcast or multicast data frame that 45 
belongs to the protocol stack, the access point checks to see 
if a corresponding entry exists in the protocol stack's 
broadcast multicast filtering database. If an entry exists, the 
expiry counter associated with that entry is reset to a 
predetermined timeout value. When the expiry counter 50 
reaches zero, after the predetermined timeout period, the 
filtering database entry will be deleted unless the mobile 
network node is still registered with the access point. In that 
case, the expiry counter is reset to the predetermined timeout 
value. 55 

The embodiments of the invention in which an exclusive 
property or privilege is claimed are defined as follows: 

1. In a communications system comprising a plurality of 
wired networks, a plurality of wireless networks and an 
access point between each wireless network and a wired go 
network, each said access point controlling the transmission 
of messages between one of said wireless networks and one 
of said wired networks, wherein said access points control 
said transmission by performing the following steps: 

creating a table in each said access point, said table 65 
including the identity of each node in its associated 
wireless network and predetermined communication 
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40 



parameters associated with each node on said associ- 
ated wireless network; 

comparing identity and communication parameter infor- 
mation associated with each message received by said 
access point with corresponding information in said 
table at said access point; and 

transmitting, to said associated wireless network, only 
those messages which will be responded to by a node 
on said associated wireless network as determined by 
comparing said identity and communications param- 
eters in said received message to entries in said table. 

2. In a communications network including at least one 
wired network and at least one wireless local area network 
LAN and at least one access point connecting the at least one 
wireless LAN to the at least one wired network, a device to 
control transmissiort of messages between said at least one 
wireless LAN and said at least one wired network so as to 
preserve bandwidth on said at least one wireless LAN, said 
device comprising: 

means for storing a table of predetermined message 
parameters at the at least one access point; 

means for comparing parameters in each message 
received from the at least one wired network connected 
to said at least one access point to said parameters 
stored in said table; and 

means for transmitting messages between said at least one 
wireless LAN and said at least one wired network when 
said parameters in said each message correspond to 
message parameters in said table in said at least one 
access point. 

3. In the communications network as defined in claim 2 
wherein said at least one wired network includes LANs. 

4. In the commimicaUons network as defined in claim 2 or 
claim 3 wherein said communications network includes 
mobile terminals in said at least one wireless LAN and said 
predetermined parameters define destination addresses, pro- 
tocol identifiers and destination names associated with each 
protocol for each mobile terminal associated with said ai 
least one access point. 

5. The communication network system as defined in claim 
4 further including means to selectively compare said 
parameters in said message to said parameters in said table 
so that a preferred level of filtering of said messages can be 
selected. 

6. The communication network as defined in claim 4 and 
further including means for transferring table entry infor- 
mation from one access point to a second access point when 
a mobile terminal moves from a first wireless LAN con- 
nected to said one access point to a second wireless LAN 
connected to said second access point. 

7. The communication network as defined in claim 6 
wherein said means for transferring transfers said table 
information directiy from said table in said one access point 
to said table in said second access point. 

8. The communication network of claim 6 wherein said 
means for transferring includes transmitting said table infor- 
mation directiy from said mobile terminal to said table in 
said second access point in response to an indication from 
said mobile terminal that it requires access to said second 
access point. 

9. In the communications network as defined in claim 5 
wherein said at least one access point further includes means 
for responding to broadcast traffic levels in said wired 
network to control said level of filtering. 

10. In the communications network as defined in claim 1 
further including Uie steps of selecting additional parameters 
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in said table for comparison with parameters received in said 
message frames. 

11. A device for controlling the transmission of messages 
between at least one wired network and at least one wireless 
network comprising: 5 
a first interface means for coupling the device to the at 

least one wired network; 
a second interface means for coupling the device to the at 

least one wireless network; and 
a third interface means for interconnecting the first inter- 
face means and the second interface means, said third 
interface means including a filtering means for receiv- 
ing messages from the at least one wired network 



10 



14 



correlating selected parameters in selected ones of the 
messages received to parameters stored in said device 
and forwarding messages to said at least one wireless 
network if the selected parameters in said selected ones 
of the messages correspond to selected ones of the 
parameters stored and forwarding to the at least one 
wireless network only those messages requiring action 
from a node on said at least one wireless network. 
12. The communications network set forth in claim 10 

wherein the additional parameters are a function of trafBc on 

said conmiunications network. 
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Communication establishment method for cellular communication system, 
involves receiving general and specific poll responses with same user 
ID from mobile station, for establishing communication with base 
station 

Abstract (Basic) : 

. . . A general poll message with base station (BS) ID, is 

transmitted by BS (104) to mobile station (102) which in turn 
transmits response with user ID. The BS transmits specific poll 
message along with user ID to mobile station which transmits 
specific poll response only if message is received without error and 
with the same ID. The BS starts communicating with the mobile 
station, after receiving both the response messages. 

. . . For cellular mobile telephone system, preferably one 

using a spread-spectrum technique, e.g. in the PCS band... 

...a simple and flexible over-air protocol which supports an unlimited 

number of users and base stations . Minimizes interference between 
neighboring base stations . Protects communication against errors 
since user ID verification is repeatedly performed. . . 

...The figure shows a network architecture illustrating connections between 
base station and network. . . 



... mobile station (102... 
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(57) ABSTRACT 

A simple and flexible over-air protocol for use with a mobile 
telephone system, having hand-held telephones in a micro- 
cell or other type of cellular communication system. A 
method in which user stations communicate with one or 
more base stations to place and receive telephone calls, in 
which the user stations are provided a secure voice or data 
link and have the ability to handoff calls between base 
stations while such calls are in progress. Each base station 
has a set of "air channels" to which it transmits in sequence. 
The air channels supported by each base station are called 
that base station's "polling loop". A user station receives 
general polling information on an unoccupied air channel, 
transmits responsive information to the base station, and 
awaits acknowledgment from the base station. Each base 
station may therefore simultaneously maintain communica- 
tion with as many user stations as there are air channels in 
its polling loop. The ability of a user station to communicate 
on any unoccupied air channel makes the protocol air- 
channel agile, while the stability of user station and base 
station clocks may define air channels, gaps, and minor 
frames. 
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tion are interrupted. When a threshold for an error rate is 
exceeded, the base station 104 and user station 102 each 
independently stop sending data in information messages 
303 and information responses 306, and return to the specific 
poll step 310 for resynchronization. In an embodiment 
where the specific poll message has been eHminated as 
redundant, the base station 104 and the user station 102 may 
determine resynchronization by means of a designated bit in 
the header field 207. 

[0135] At the specific poll step 310, the base station 104 
transmits the specific poll message 302 and the user station 
102 searches the major frame 201 for a specific poll message 
302 having a user ID 309 which matches its own user ID 
309. After this handshaking succeeds, the base station 104 
and user station 102 return to the link-established step 311 
and continue transmitting and receiving information mes- 
sages 303 and information responses 306. 

[0136] This technique for recovery from desynchroniza- 
tion, also called "reacquiring the base station," has the 
advantage that both the base station 104 and the user station 
102 independently reverify the user ID 309 before commu- 
nication is resumed. This assures that the base station 104 
and the user station 102 stay in synchrony and communicate 
only on the agreed air channel 203. Should the base station 
104 and the user station 102 be unable to reestablish the 
communication link 312, the telephone call will be termi- 
nated by the base station 104. 

[0137] At the link-established step 311, the base station 
104 also repeatedly and periodically transmits the user ID 
309 in the D field 208 of the information message 303. The 
user station 102 checks the user ID 309 to assure that the 
base station 104 and the user station 102 are each commu- 
nicating on the proper air channel 203. If this user ID 309 
does not match, it returns to the specific poll step 310 to 
reacquire the base station 104, as noted above. 

[0138] Protocol Flexibility 

[0139] The protocol described above provides flexibility 
with a small number of unique messages. The protocol is 
immune to changes in polling loop length and in the number 
of air channels allowed. The number of simultaneous users 
is therefore responsive to voice compression and data rate 
constraints and not by the protocol. The protocol also 
provides for an unlimited number of user stations in a given 
area, with the provision that the number of simultaneous 
calls cannot exceed the number of air channels. An unlimited 
number of base stations are also supported, making base 
station geography a function of available frequencies and 
range, not of protocol. TTie ability to interrogate and acquire 
alternate base stations in the presence of faulty communi- 
cation provides for the expansion of a microcell network 
which may use base station handoff to route calls to base 
stations within range. 

[0140] System Synchronization 

[0141] In order to maximize system throughput capacity, 
the TO MA frame times for all base stations 104 within a 
geographical region are preferably synchronized to within a 
specified tolerance. For example, in one embodiment, all 
base stations 104 begin transmissions for the same frame 
within 6 microseconds. 

[0142] The primary data timing standard in a digital 
network backhaul system, such as Tl, ISDN BRI, or PRI, is 



the pubUc switched telephone network (PSTN) timing stan- 
dard. To prevent data precession into over run or under run, 
all base station controllers 105 and base stations 104 in such 
systems are synchronized to the PSTN timing standard. 

[0143] At the system level, a GPS receiver is used at each 
base station controller 105 (and optionally at each base 
station 104) to generate the primary reference timing marker 
for the TOMA frame timing. This marker is captured at the 
base station controller 105 every second and transmitted to 
the attached base stations 104. Abase station controller may 
temporarily turn olT any major frame 201 or minor frame 
202 of a given cell 103 which may be interfering with a 
neighboring cell 103. 

[0144] Each base station 104 provides the basic TOMA 
loop timing structure for its cell or sector. As previously 
noted, a synchronization preamble in the form a control 
pulse 215 or power control command is transmitted at the 
beginning of each minor frame 202 by the user station 102 
and the base station 104, respectively. When the appropriate 
preamble, consisting of a code sequence 48 chips in length, 
is received, a digital correlator (i.e., a matched filter) attuned 
to the specific preamble generates an internal synchroniza- 
tion pulse which may be very brief (e.g., two chips in 
duration, or 400 nanoseconds). The internal synchronization 
pulse may then be used to synchronize the start of M-ary 
symbol detection process. 

[0145] Alternative Embodiments 

[0146] While preferred embodiments are disclosed herein, 
many variations are possible which remain within the con- 
cept and scope of the invention, and these variations would 
become clear to one of ordinary skill in the art after perusal 
of the specification, drawings and claims herein. 

[0147] For example, information which is transmitted 
from transmitter to receiver is referred to herein as "data", 
but it would be clear to those of ordinary skill in the art, after 
perusal of this apphcation, that these data could comprise 
data, voice (encoded digitally or otherwise) error-correcting 
codes, control information, or other signals, and that this 
would be within the scope and spirit of the invention. 

[0148] Moreover, while the specification has been 
described with reference to TOMA multiplexing of air 
channels, it would be clear to those of ordinary skill in the 
art, after perusal of this application, that air channels may be 
multiplexed by other means, including FDMA (frequency 
division multiplexing), by assigning air channels to differing 
frequency bands, CDMA (code division multiplexing), by 
assigning air channels to difi:ering spread -spectrum spread- 
ing codes, other multiplexing techniques, or combinations of 
these multiplexing techniques, and that this would be within 
the scope and spirit of the invention. 

What is claimed is: 

1. In a communication system having a base station and 
a plurality of user stations, a method of estabhshing com- 
munication between said base station and one of said 
plurality of user stations, comprising the steps of 

transmitting a general polling message from said base 
station; 

receiving said general poUing message at said one user 
station; 
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transmitting a general polling response from said user 
station; 

receiving said general polling response at said base sta- 
tion; 

transmitting a specific polling message from said base 
station; 

receiving said specific polling message at said one user 
station; 



transmitting a specific polling response from said one user 
station; 

receiving said specific polling response at said base 
station; and 

thereafter transmitting and receiving information mes- 
sages between said base station and said one user 
station over an established communication link. 

>tt « 4. 4. 4e 
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ABSTRACT 



The invention relates to a method of identifying a protocol 
data unit in a network layer of an air interface in a cellular 
radio network, to a cellular radio network and to a protocol 
data unit. A network layer usually includes connection 
management, mobility management and radio resources 
management sublayers. In the invention, the radio resources 
management sublayer is replaced by a radio network sub- 
layer. A protocol data unit header includes a protocol dis- 
criminator. Some of the protocol discriminator values are 
allocated to the identification of protocol data units in the 
connection management sublayer and the mobility manage- 
ment sublayer. According tot the invention, at least one 
unreserved value of the protocol discriminator is used for 
identifying protocol data units in the radio network sublayer. 

15 Claims, 6 Drawing Sheets 
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plural number of radio bearer set-up procedures can take 
place simultaneously. A radio bearer control management 
entity RBC_MGT creates separate control entities RBC_0, 
. . . RBC_N for each set-up procedure., When a control 
entity has received from the network a first protocol data unit 
informing the radio bearer identifier BID (Bearer Identifier) 
that corresponds to the transaction identifier TI, the trans- 
action identifier can be released, the transaction means 
TI/BID then transferring following protocol data units to the 
correct control entity. 

The bearer identifier BID is placed into the non- 
imperative portion of the protocol data unit as a standard 
information element. The transaction identifier TI is coded 
into a half octet, bit 8 being a flagbit and bits 7, 6 and 5 
providing the actual transaction identifier. A flagbit 0 indi- 
cates that the bearer identifier BID has not received any 
value yet. A flagbit 1 indicates that the protocol data unit 
contains the bearer identifier BID. A value 000 of the actual 
transaction identifier means that the transaction identifier is 
not in use. The transaction identifier can take seven actual 
values: 001, 010, Oil, 100, 101, 110, 111. This also sets a 
limit to the number of simultaneous radio bearer set-up 
procedures initiated by the mobile station 150. 

When necessary, the control entities and the RRC entity 
transfer the protocol data unit also to other sublayers of the 
network layer for processing. 

An extra advantage provided by the described method is 
that introduction of new functions for processing by the 
radio network sublayer allows the radio network sublayer to 
read any messages it finds interesting as they pass through, 
although they are addressed to upper sublayers, and to take 
the information it needs. Messages of interest are identified 
in the identifying means PD on the basis of the protocol 
discriminator. 

Another advantage is that messages of the upper sublayers 
(mobility management, control management) need not be 
conveyed over the air interface in the protocol data units of 
the radio network sublayer, but the radio network sublayer 
can directly check in the protocol discriminator which layer 
is to process the message concerned. A method of identifi- 
cation other than the one described in the invention would 
require the upper sublayer messages to be packed as data 
messages of the radio network sublayer before they are 
transferred over the air interface. This would introduce at 
least one additional octet to each message. 

Processing by software, as described in connection with 
FIG. 6, is carried out at the mobile station 150 also in the 
transmit direction, and in the base station system 126 in both 
transmit and receive direction. 

Although the invention is described above with reference 
to an example shown in the accompanying drawings, it is 
apparent that the invention is not limited to it, but can vary 
in many ways within the inventive idea disclosed in the 
attached claims. 

What is claimed is: 

1. A method of identifying a protocol data unit in a 
network layer of an air interfaces in a cellular radio network, 
the network layer comprising a connection management 
sublayer and a mobility management sublayer, and the 
protocol data unit comprising a header which includes a 
protocol discriminator, some of the protocol discriminator 
values being allocated to the identification of protocol data 
units in the connection management sublayer and the mobil- 
ity management sublayer, the method comprising: 

using at least one unreserved value of the protocol dis- 
criminator for identifying protocol data units in a radio 
network sublayer. 
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2. The method according to claim 1, wherein reserved 
values comprise the values 0, 1, 2, 3, 4, 5, 6, 9, 11, 14, 15. 

3. The method according to claim 1, wherein unreserved 
values comprise the values 7, 8, 10, 12, 13. 

5 4. The method according to claim 1, wherein the header 
comprises a transaction identifier which is used in a con- 
nection initiated by a mobile station. 

5. The method according to claim 4, wherein the trans- 
action identifier is provided by a half octet unused by the 

10 protocol discriminator. 

6. The method according to claim 1, wherein the protocol 
data unit further comprises a radio bearer identifier. 

7. The method according to claim 1, wherein there is a 
one-to-one correspondence between the sublayers and the 

15 protocol data units. 

8. A cellular radio network comprising: 
a base station system, 

a mobile station communicating with the base station 
system over an air interface, and 

identifying means for identifying a protocol data unit in a 
network layer of the air interface by processing a 
protocol discriminator included in a header which the 
protocol data unit comprises, some of the protocol 
2^ discriminator values of the identifying means being 
allocated to the identification of protocol data units in 
the connection management sublayer and the mobility 
management sublayer included in the network layer, 

wherein the identifying means are arranged to use at least 
3Q one unreserved value of the protocol discriminator for 
identifying protocol data units in a radio network 
sublayer. 

9. The cellular radio network according to claim 8, 
wherein reserved values of the identifying means comprise 

35 the values 0, 1, 2, 3, 4, 5, 6, 9, 11, 14, 15. 

10. The cellular radio network according to claim 8, 
wherein unreserved values of the identifying means com- 
prise the values 7, 8, 10, 12, 13. 

11. The cellular radio network according to claim 8, 
40 further comprising transaction means for processing a trans- 
action identifier included in the header, the transaction 
identifier being arranged to be used in a connection initiated 
by the mobile station. 

12. The cellular radio network according to claim 11, 
45 wherein the transaction means process an unused half octet 

of the protocol discriminator as the transaction identifier. 

13. The cellular radio network according to claim 8, 
further comprising transaction means for processing the 
radio bearer identifier included in the protocol data unit. 

5Q 14. The cellular radio network according to claim 13, 
wherein the transaction means are arranged to set a one-to- 
one correspondence between the sublayers and the protocol 
data units. 

15. A protocol data unit in a network layer of an air 
55 interface in a cellular radio network, the network layer 
comprising a connection management sublayer and a mobil- 
ity management sublayer, the protocol data unit comprising: 
a header which includes a protocol discriminator, some of 
the protocol discriminator values being allocated to the 
60 identification of protocol data units in the connection 
management sublayer and the mobility management 
sublayer, 

wherein at least one unreserved protocol discriminator 
value is allocated to the identification of protocol data 
65 units in the radio network sublayer. 

* * * 
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Abstract (Basic) : 

The method involves transmitting a call releasing message from a 

base station to a mobile phone after storing the updated 
operating parameters in a nonvolatile memory. The updated operating 
parameters corresponding to at least one parameter change code are 
downloaded from the base station to the mobile phone. 
... An encrypting unit is used for securing communications between 

the mobile phones in a network. The mobile phone is programmed with 
a parameter change service option and at least one parameter change 
code for permitting over-the-air changing of operating parameters. A 
page message, which includes an inquiry as to the identity of the 
mobile phone and change service option , is transmitted from the 
base station within the network to the mobile phone. A page 
response message is transmitted from the mobile phone to the base 
station to verify the identity of the mobile phone and the 
presence of the parameter change service option . Instructions from 
the base stations are transmitted to the mobile phone to enter an 
over-the-air service providing process. At least one parameter change 
code from the base station is then transmitted to the mobile 
phone. The mobile phone transmits a response verifying at least one 
parameter change code. An INDEPENDENT CLAIM is also i ncluded for the 

radio communication network. . . 

...Used in administration of parameters for operation of mobile 
telephones . , . 

...Allows network-initiated over-the-air access to a mobile station's 
number assignment module (NAM) without requiring user intervention. 
Simplifies administration of NAM parameters by network service 
provider. Preserves security and integrity of N7^ parameters to prevent 
unauthorized access. Maintains, changes and updates mobile phone 
parameters by a network service provider without requiring intervention 
by mobile phone user. Allows actions for protecting service 
provider's resources as well as to improve... 

...deterrence and apprehension of persons who have hijacked a subscriber's 
account by stealing their mobile phone or by intercepting 
transmission from the mobile phone. . . 
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[57] ABSTRACT 

The procedure for Over-The-Air Parameter Administration 
(OTAPA) utilizes the over-the-air programming protocol 
and procedures which support the Over-The-Air Service 
Provisioning (OTASP) feature in accordance with estab- 
lished industry standards (TIA/EIA/IS-683). The mobile 
phone is programmed with a service option for changing the 
NAM parameters including an identification number for this 
option. The network base station sends a message to the 
mobile phone using the identification number and, if the 
mobile phone has OTAPA capability, it responds indicating 
support. The base station then transmits message telUng the 
mobile station to proceed to the Trafi&c Channel and inquires 
whether the encryption mode is enabled, proceeding with 
the OTAPA only if the encryption mode is enabled. Once on 
the Traffic Channel, a Parameter Change Code (PCC) is sent. 
If the PCC is verified by the mobile unit, the base station 
proceeds to update the parameters and store the updated 
parameters into the phone's memory. After verification of 
the programmed data in accordance with OTASP 
processing, the process is terminated. No user intervention is 
required to initiate or conduct the OTAPA procedure. 

30 Claims, 2 Drawing Sheets 
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In FIG. 2, the Mobile Station is generally designated as 
100 and the Base Station as 200. Mobile Station 100 is in the 
Idle State 101 when, at the direction of the Network Service 
Administrator, Base Station 200 initiates a Mobile termi- 
nated call 201 on Paging Channel 150, sending a General 
Page Message 202 which includes the OTAPA service 
option (SERVICE_OPnON X set to "1"). Mobile Station 
100 receives the page message and processes the OTAPA 
Service Option request 102. Per the assumptions, Mobile 
Station 100 supports the OTAPA Service Option, Mobile 
Station 100 responds on Access Channel 160, sending a 
Page Response Message 103 confirming the mobile's sup- 
port of the OTAPA Service Option. Base Station 200 Process 
the Page Response Message and enables the Signaling 
Message Encryption (SME) 203 and, still on Paging Chan- 
nel 150, sends a Channel Assignment Message 204 which 
includes the encryption mode turned on (ENCRYPT__ 
MODE set to "01"). Mobile Station 100 processes the 
Channel Assignment Message and verifies the SME, then 
sets up the designated Traffic Channel 170 according to 
IS- 95 procedures 104. 

Base Station 200 sends a Data Burst Message using 
OTASP BURST-TYPE fields 205 and transmits the message 
to Mobile Station 100 over Traffic Channel 170. This 
message includes a Protocol Capability Request Message. 
(All subsequent communications for this procedure occur 
over Traffic Channel 170.) Mobile Station 100 processes 
Data Burst Message 205 and enters into the OTASP process 
according to IS -683 (step 105), and responds to indicate 
OTAPA feature capabifity 105 by sending a Protocol Capa- 
bility Response Message in step 106. In step 206, Base 
Station 200 transmits the Parameter Change Code (PCC) for 
the Mobile Station 100. If the Mobile Station has more than 
one PCC, the Base Station 200 will specifically select the 
PCC for updating the Roaming List. Assuming the PCC is 
correct, Mobile Station 100 receives and validates the trans- 
mitted PCC. 

Still communicating over Traffic Channel 170, in steps 
207 and 107, Base Station 200 and Mobile Station 100, 
respectively, follow the System Selection for Preferred 
Roaming (SSPR) procedure for Roaming List update as set 
forth in IS-683-A. After the updated roaming information is 
fully downloaded, in step 208, Base Station 200 initiates the 
OTASP Data Commit process by sending a Data Commit 
Message (OTASP_MSG TYPE field set to "00000101") in 
accordance with IS-683, telling Mobile Stafion 100 to pro- 
cess and update the Roaming List. Mobile Station receives 
the Data Commit Message and sets the field of the data 
commit result code to indicate acceptance of the Data 
Commit Message (RESULT__CODE set to "00000000*0 
and to store the new data in permanent memory. (Note that, 
in accordance with lS-683), if any errors are detected in the 
data, the RESULT_CODE will be set to the appropriate 
value to indicate the nature of the error.) After acceptance is 
indicated by Mobile Station 100, the call is released. 

The Over-The-Air Parameter Administration method of 
the present invention provide the advantage of allowing a 
network service provider to initiated over-the-air access to a 
mobile station *s Number Assignment Module (NAM) with- 
out requiring user intervention, allowing for actions to be 
taken to protect the service provider's resources as well as 
to improve service to its subscribers. The strict enforcement 
of encryption procedures provides means for preserving 
security and integrity of NAM parameters to prevent unau- 
thorized access, including unauthorized switching of service 
providers or "slamming". The inventive procedure also may 
be useful in assisting in the deterrence and apprehension of 
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persons who have hijacked a subscriber's account by steal- 
ing their mobile phone or by intercepfing and using a 
transmission from a mobile station. The OTAPA procedure 
can be initiated using existing OTASP protocols and 
5 procedures, requiring minimal changes to standards. 

Other embodiments and modifications of the present 
invention will occur readily to those skilled in the art in view 
of these teachings. Therefore, this invention is to be limited 
only by the following claims, which include other embodi- 
ments and modifications when viewed in conjunction with 
the above specification and accompanying drawings. 

I claim: 

1. A method for making changes in at least one of a 
plurality of operating parameters of a mobile phone which 
operates within a network, the plurality of operating param- 

^5 eters being stored within a non- volatile memory, the method 
comprising: 

providing an encryption means for securing communica- 
tions between the mobile phone and the network; 

programming the mobile phone with a parameter change 
20 service option and at least one parameter change code 
for permitting over-the-air changing of operating 
parameters; 

transmitting a page message from a base station within the 
network to the mobile phone, the page message includ- 
2^ ing an inquiry as to the identity of the mobile phone and 
the presence of the parameter change service option; 
transmitting a page response message from the mobile 
phone to the base station verifying the identity of the 
mobile phone and the presence of the parameter change 
service opfion; 
transmitting instructions fi-om the base station to the 
mobile phone to enter an over-the-air service provi- 
sioning process; 
25 transmitting the at least one parameter change code from 
the base station to the mobile phone; 
transmitting from the mobile phone to the base station a 
response verifying the at least one parameter change 
code; 

40 downloading updated operating parameters correspond- 
ing to the at least one parameter change code from the 
base station to the mobile phone; 
storing the updated operating parameters in the non- 
volatile memory; and 

45 transmitting from the base station to the mobile phone a 
call releasing message. 

2. The method of claim 1, wherein the encryption means 
comprises a programmable encryption mode and the step of 
programming the mobile phone includes programming the 

50 programmable encryption mode to enable message encryp- 
tion. 

3. Ilie method of claim 2, wherein the page message 
includes an inquiry to confirm that the programmable 
encryption mode is enabled. 

55 4. The method of claim 1, wherein the encryption means 
comprises a permanent encryption code for encrypting all 
communications between the mobile phone and the base 
station. 

5. The method of claim 1, wherein the plurality of 
60 operating parameters arc divided into a plurality of param- 
eter groups and wherein said at least one parameter change 
code comprises a plurality of parameter change codes with 
one parameter change code corresponding to each parameter 
group of the plurality of parameter groups. 
65 6. The method of claim 1, wherein the at least one 
parameter change code is an authentication key for the 
mobile phone. 
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7. The paethod of claim 1, wherein the step of determining 
whether the mobile phone is set up for message encryption 
comprises: 

transmitting a channel assignment message from the base 
station to the mobile phone wherein the channel assign- 5 
ment message has an encryption mode turned on; and 

transmitting a response from the mobile phone to the base 
station verifying that the encryption mode is turned on, 

8. The method of claim 1, wherein the step of program- 
ming the mobile phone comprises assigning one service 
option number from a plurality of service option numbers 
for the parameter service option and setting the value of the 
one service option number to "1". 

9. The method of claim 8, wherein the page response 
message includes a field containing the one service option 
number. 

10. The method of claim 1, wherein the at least one 
parameter change code has a pre -set value. 

11. The method of claim 10, wherein the pre-set value of 
the at least one parameter change code may be changed to 
a different value only by intervention of a user of the mobile 
phone. 

12. The method of claim 1, wherein the step of down- 
loading updated operating parameters includes downloading 
the updated operating parameters using the over-the-air 
service provisioning process according to the LS-683 stan- 
dard. 

13. A method of claim 1, wherein the step of determining 
whether the mobile phone is set up for message encryption 
further includes transmitting a channel assignment message 
to the mobile phone. 

14. The method of claim 1, wherein the step of transmit- 
ting instructions to enter an over-the-air service provisioning 
process includes transmitting data burst messages. 

15. A wireless communications network having a base 
station with a service administrator, and a mobile station, the 
mobile station having a plurality of operating parameters 
stored within a non- volatile memory, at least a portion of the 
plurality of operating parameters which may be changed by 
the service administrator, the network comprising: 

message encryption means for securing communications 
between the base station and the mobile station; 

means for programming the memory of the mobile station 
wherein the mobile station has programmable options 45 
for over-the-air parameter changes, the mobile station 
being set to enable the programmable options; 

means for initiating a call from the base station to the 
mobile station when the mobile station is in an idle 
mode, the call comprising a paging message for inter- 50 
rogating the mobile station to confirm a mobile station 
identity and that the programmable options for over- 
the-air parameter changes are enabled; 

means for terminating the call if the programmable 
options for over-the-air parameter changes are not 55 
enabled; 

means for instructing the mobile phone to enter into an 
over-the-air service provisioning process; 

means for enabling a download of updated operating 
parameters from the base station to the mobile station 
including transmitting a parameter change code portion 
within the programmable options for over-the-air 
parameter changes; 

means for storing the updated operating parameters in the ^5 
non-volatile memory; and 

means for terminating the call. 
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16. The network of claim 15, wherein the message 
encryption means comprises a programmable encryption 
mode and the means for programming the memory of the 
mobile station includes means for programming the pro- 
grammable encryption mode to enable message encryption. 

17. The network of claim 16, wherein the paging message 
includes an inquiry to confirm that the programmable 
encryption mode is enabled. 

18. The network of claim 15, wherein the message 
encryption means includes a permanent encryption code for 
encrypting all communications between the mobile station 
and the base station. 

19. The network of claim 15, wherein the over-the-air 
service provisioning process is in accordance with the 
lS-683 standard. 

20. llie network of claim 15, wherein the plurality of 
operating parameters are divided into a plurality of param- 
eter groups and each parameter group of the plurality has a 
corresponding parameter change code. 

21. The network of claim 15, wherein the parameter 
change code is an Authentication key for changing a Shared 
Secret Data set of the mobile station. 

22. Ttie network of claim 15, wherein the paging message 
includes a channel assignment message from the base station 
to the mobile phone wherein the channel assignment mes- 
sage has an encryption mode turned on and a response 
message from the mobile phone to the base station verifying 
that the encryption mode is turned on. 

23. The network of claim 15, wherein the means for 
programming includes a data field having a plurafity of 
service option numbers including one ser\ace option number 
corresponding to a parameter service option for over-the-air 
parameter changes and setting the value of the one service 
option number to "1". 

24. The network of claim 15, wherein the parameter 
change code portion has a pre-set value. 

25. The network of claim 24, wherein the pre-set value of 
the parameter change code portion may be changed to a 
different value only by intervention of a user of the mobile 
station. 

26. A method for administering a wireless communica- 
tions network comprising a base station and a plurality of 
mobile phones, each mobile phone having an identity and a 
plurality of operating parameters stored in a non -volatile 
memory, at lea.st a portion of the operating parameters which 
require updating, wherein a user of the mobile phone is not 
required to initiate a procedure for updating the operating 
parameters, the method comprising: 

programming the mobile phone with a parameter change 
service option and at least one parameter change code 
for permitting over-the-air changing of operating 
parameters; 

when an update to the operating parameters is required, 
transmitting a General Page Message from a base 
station to the mobile phone in an Idle Mode, the 
General Page Message including a request to verify the 
identity of the mobile phone and a first data field for the 
parameter change service option; 

receiving a Page Response Message from the mobile 
phone to the base station including the identity of the 
mobile phone and the first data field for the parameter 
change service option; 

transmitting a Channel Assignment Message from the 
base station to the mobile phone, the Channel Assign- 
ment Message including a second data field for mes- 
sage encryption and instructing the mobile phone to set 
up a traflSc channel; 
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receiving a response from the mobile phone including the 

second data field to verify message encryption; 
terminating the transmission from the base station if 

message encryption is not verified; 
transmitting a Data Burst Message from the base station ^ 

to the mobile phone instructing the mobile phone to 

enter an over-the-air service provisioning process; 
transmitting a Protocol Capability Request Message from 

the base station to the mobile phone, the Protocol 

Capability Request Message including a third data field 

for feature capability of the mobile phone; 
receiving a Protocol Capability Response Message from 

the mobile phone indicating the third data field; 
transmitting the at least one parameter change code firom 15 

the base station to the mobile phone; 
transmitting from the mobile phone to the base station a 

response verifying the at least one parameter change 

code; 

downloading updated operating parameters correspond- 
ing to the at least one parameter change code from the 
base station to the mobile phone; and 
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transmitting a Data Commit Message from the base 
station to the mobile phone for storing the updated 
operating parameters in the non-volatile memory and 
for releasing the call. 

27. The method of claim 26, wherein the at least one 
parameter change code has a pre -set value. 

28. The method of claim 27, wherein the pre-set value of 
the at least one parameter change code may be changed to 
a different value only by intervention of a user of the mobile 
phone. 

29. The method of claim 26, wherein the step of down- 
loading updated operating parameters includes downloading 
the updated operating parameters using the over-the-air 
service provisioning process according to the IS-683 stan- 
dard. 

30. The method of claim 26, wherein the at least one 
parameter change code is an A-key for changing a set of 
Shared Secret Data for the mobile phone. 

***** 
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(57) ABSTRACT 

A packet encapsulation scheme for multiplexing apphcation 
sessions — ^Lightweight IP Encapsulation (LIPE) — is 
described. An LIPE packet comprises at least one multiplex- 
ing header (NH) and associated multimedia data packet 
(MDP). The LIPE packet uses UDP/IP as transport. An MH 
field further comprises a 16-bit a user identifier (UID) field, 
an 11 bit length indicator (LNG) field, a 1 bit "more" (M) 
field and an optional payload type/class of service (PT/CoS) 
field comprising 8 bits. 

19 Claims, 8 Drawing Sheets 
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heterogeneous voice source types, while the CoS field gives 
the application the flexibility to choose different type of 
services, such as low loss or low delay, after the LIFE 
demultiplexing point. 

The foregoing merely illustrates the principles of the 
invention and it will thus be appreciated that those skilled in 
the art will be able to devise numerous alternative arrange- 
ments which, although not explicitly described herein, 
embody the principles of the invention and are within its 
spirit and scope. For example, although the inventive con- 
cept was illustrated herein as being implemented with dis- 
crete functional building blocks, e.g., an UPE formatter, 
etc., the functions of any one or more of those building 
blocks can be carried out using one or more appropriately 
programmed processors, e.g., a digital signal processor; 
discrete circuit elements; integrated circuits; etc. Further, 
although illustrated in the context of CDMA, the inventive 
concept is applicable to any wireless system (e.g., UMTS, 
etc.) or application that requires real-time multiplexing of 
data streams. 

What is claimed is: 

1. A method for use in a packet server, the method 
comprising the steps of: 

receiving a number of incoming data packets; 

formatting a multiplexing header for each incoming data 
packet, wherein the formatted multiplexing header 
includes a user identifier field, a length indicator field, 
a more packets field, a class of service field, and a 
sequence number field; and 

multiplexing the formatted multiplexing headers and their 
associated incoming data packets into a single transport 
session. 

2. The method of claim 1 wherein the formatting step 
encapsulates LIFE packets using Internet Protocol/User 
Datagram Protocol (IPAJDP) transport. 

3. The method of claim 2 wherein the format for an 
encapsulated LIPE packet using (IP/UDP) transport com- 
prises an IP header field, a UDP header field and at least one 
multiplexing header and an associated multimedia data 
packet, wherein the multiplexing header comprises a user 
identifier field, a length identifier field, and a more packets 
field, the more field being used to indicate the use of more 
than one multiplexing header and associated multimedia 
data packet for transporting incoming data packets. 

4. The method of claim 1 wherein the more packets field 
is used to indicate the use of more than one multiplexing 
header and an associated data packet for transporting incom- 
ing data packets. 

5. The method of claim 1 wherein the class of service field 
further comprises a number of bits representative of a 
payload type and a remaining number of bits representative 
of a quality of service. 

6. The method of claim 5 wherein the number of bits 
representative of the payload type represent different voice 
coding schemes. 

7. The method of claim 1, wherein, the number of 
incoming data packets is from a plurality of users. 

8. A method for use in a packet server, the method 
comprising the steps of: 

receiving a number of incoming data streams from a 
plurahty of users; 

formatting the incoming data packets into user datagram 
(UDP)/Internet Protocol (IP) packets such that each 
UDP/IP packet encapsulates at least a UDP header, an 
IP header and a formatted multiplexing header, wherein 
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the formatted multiplexing header portion includes 
information for identifying an application associated 
with the payload, a user identifier field, a length indi- 
cator field, a more packets field, and a class of service 
field, where the more packets field is used to indicate 
the association of more than one data packet for the 
application. 

9. The method of claim 8 wherein the class of service field 
further comprises a number of bits representative of a 
payload type and a remaining number of bits representative 
of a quality of service. 

10. The method of claim 9 wherein the number of bits 
representative of the payload type represent different voice 
coding schemes. 

11. A method for use in a packet server, the method 
comprising the steps of: 

receiving a number of incoming LIPE packets associated 
with at least one of different applications and a plurality 
of users; and 

formatting each of the incoming LIPE packets into user 
datagram (UDP)/Interaet Protocol (IP) packets such 
that each UDP/IP packet encapsulates at least a UDP 
header, an IP header, a formatted multiplexing header 
and a payload portion, wherein the formatted multi- 
plexing header portion includes information for iden- 
tifying the different applications, a user identifier field, 
a length indicator field, a more packets field, and a class 
of service field, where the more packets field is used to 
indicate the association of more than one data packet 
for an application. 

12. The method of claim 11 wherein the class of service 
field further comprises a number of bits representative of a 
payload type and a remaining number of bits representative 
of a quality of service. 

13. The method of claim 12 wherein the number of bits 
representative of the payload type represent different voice 
coding schemes. 

14. An improved apparatus for transporting packets, the 
improved apparatus comprising: 

a reception unit adapted to receive a number of incoming 
data packets; 

an analysis unit adapted to analyze multiplexing header 
information associated with each incoming data packet; 

a formatting unit adapted to format a multiplexing header 
for each incoming data packet utiUzing the analyzed 
multiplexing header information; 

wherein the formatted multiplexing header includes a user 
identifier field, and length indicator field, a more pack- 
ets field, a class of service field and a sequence number 
field, wherein the more packets field is used to indicate 
the use of more than one multiplexing header and 
associated data packet for transporting incoming data 
packets; and 

a modulator unit adapted to multiplex the incoming data 
packets into a single transport session. 

15. The improved apparatus of claim 14 wherein the 
formatting unit further encapsulates the incoming data pack- 
ets using User Datagram Protocol/Internet Protocol (UDP/ 
IP) transport. 

16. The improved apparatus of claim 15 wherein the 
format for an encapsulated LIPE packet using (IP/UDP) 
transport comprises an IP header field, a UDP header field 
and at least one multiplexing header and an associated 
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multimedia data packet, wherein the multiplexing header 
comprises the user identifier field, length indicator field, and 
more packets field. 

17. The improved apparatus of claim 14 wherein the class 
of service field further comprises a number of bits repre- 
sentative of a payload type and a remaining number of bits 
representative of a quality of service. 
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18. The improved apparatus of claim 17 wherein the 
number of bits representative of the payload type represent 
different voice coding schemes. 

19. The method of claim 14 wherein the number of 
incoming data packets is from a plurality of users. 

***** 
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Abstract (Basic) : 

... A remote authentication dial-in user service { RADIUS ) server 

(60) is configured to transmit radius accounting messages from a 
mobile switching center/visitor location register (50) to a wireless 
application protocol ( WAP ) gateway (70) through routers (65) and 
an accounting server (75) is responsive to the message and updates the 
mapping session database (80) in the gateway . The database includes 
storage locations for an assigned temporary Internet protocol address 



and an associated number of a mobile terminal (45) . Information in a 
packet is used to update the database once a connection. . . 

INDEPENDENT CLAIMS are included for a method of associating a 
mobile station integrated services digital network (MSISDN) number 
with a temporary Internet protocol (IP) address... 

. . .Mapping an IP address to a MSISDN number in a WAP processing network 



... RADIUS server (60... 
. . . WAP gateway (7 0. . . 
. . . Routers ( 65 . . . 
. . , Mobile terminal (45 

. . .Abstract (Equivalent) : NOVELTY - A remote authentication dial-in user 
service ( RADIUS ) server (60) is configured to transmit radius 
accounting messages from a mobile switching center/visitor location 
register (50) to a wireless application protocol ( WAP ) gateway 
(70) through routers (65) and an accounting server (75) is responsive 
to the message and updates the mapping session database (80) in the 
gateway . The database includes storage locations for an assigned 
temporary Internet protocol address and an associated number of a 
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(57) ABSTRACT 

A system and method for associating an MSISDN of a 
mobile terminal with a temporarily assigned IP address is 
disclosed. A first server located within a wireless commu- 
nications network generates and transmits a start packet to a 
WAP network responsive to an access request by a mobile 
terminal. The start packet includes the MSISDN of the 
mobile terminal and an assigned IP address. A second server 
within the WAP network extracts the MSISDN in the IP 
address from the received start packet and stores this infor- 
mation together within a database. When a WAP application 
is utilized, the MSISDN may be determined from the 
database and placed in an HTTP-header of packets to the 
WAP application. 

12 Claims, 2 Drawing Sheets 



B5 



APPL 



88 

WAP GATEWAY lAPt 



70 



RADIUS ACCOUNTING SERVER 



75 



RADIUS AUTHENTICATION 
SERVER 



78 



80 



118 



ROUTER 



65 



ROUTER 



65 



MSGA/LR 



50 

V 



RADIUS 
SERVER 



60 




MOBILE TERMINAL 



2/13/2006, EAST Version: 2.0.1.4 



us 6,775, 

5 

Referring now to FIG. 4, there is illustrated a signaling 
diagram wherein a mobile terminal 45 with an estabhshed 
PPP connection to the access server 60 terminates the PPP 
connection. Initially, the mobile station 45 terminates at 135 
the PPP connection with the access server 60. In response to 5 
the termination of the PPP connection, the access server 60 
transmits an accounting request stop message 140 to the 
WAP gateway 70. This request includes the MSISDN and IP 
address of the mobile terminal 45. In response to the 
accounting request stop message 140, the WAP gateway 70 lO 
removes the entry within the mapping session database 80 
associated with the MSISDN number and IP address. The 
WAP gateway 70 responds to the accounting request stop 
message by means of an accounting response message 145 
acknowledging cancellation of the PPP connection. 15 

The previous description is of a preferred embodiment for 
implementing the invention, and the scope of the invention 
should not necessarily be limited by this description. The 
scope of the present invention is instead defined by the 
following claims. 20 

What is claimed is: 

1. A method for associating a MSISDN with a temporary 
IP address within a WAP network, comprising the steps of: 

transmitting a start packet to a server associated with the 
WAP gateway node, the start packet including a 
MSISDN and a temporary IP address of the mobile 
terminal; and 

storing the MSISDN and the temporary IP address in a 
database wherein the MSISDN and the temporary IP 
address are associated with each other responsive to the 
start packet, 

when a WAP application is utilized, determining the 
MSISDN of the mobile terminal by accessing the 
database, 35 
placing the determined MSISDN into an http header; and 
transmitting the http header to a WAP application with a 
data packet, 

configuring a RADIUS authentication server to transmit 
an account stop packet as the stop packet, 

transmitting a stop packet to the server associated with the 
WAP gateway node, the stop packet including the 
MSISDN and the temporary IP address of the mobile 
terminal; and 

45 

deleting the stored MSISDN and the temporary IP address 
from the database responsive to the stop packet. 

2. The method of claim 1, further comprising the step of 
transmitting an acknowledgment packet from the server 
responsive to the stop packet. 50 

3. The method of claim 1, wherein the step of transmitting 
further comprises the step of configuring an access server to 
transmit starting packet as the start packet. 
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4. The method of claim 1, wherein the step of transmitting 
further comprises the step of configuring the RADIUS 
authentication server to transmit an account starting packet 
as the start packet. 

5. The method of claim 4, further comprising the step of 
transmitting an acknowledgment packet from the server 
responsive to the start packet. 

6. The method of claim 1, wherein the method is used in 
at least one of an authentication process, a billing process, 
and a personalization process. 

7. A system for associating a MSISDN of a mobile 
terminal with a temporarily assigned IP address, comprising: 

a first server associated with a wireless network for 
generating a start packet responsive to an access 
request from a mobile terminal, the start packet con- 
taining a MSISDN provided by the mobile terminal and 
an IP address assigned to the mobile terminal by the 
first server. 

a database associated with a WAP network having storage 
locations for a plurality of MSlSDNs and associated 
assigned IP addresses; and 

a second server associated with the WAP network for 
extracting the MSISDN and the IP address from the 
start packet and storing the MSISDN and the IP address 
in the database wherein the second server comprises a 
RADIUS accounting server including a translation 
apphcation program interface for enabling access to the 
database by a WAP application configured to place the 
determined MSISDN into an http header; and transmit 
the http header to a WAP application with a data pack. 

8. The system of claim 7, wherein the second server is 
located within a WAP gateway of the WAP network. 

9. The system of claim 7, wherein the first server com- 
prises an integrated access system server. 

10. The system of claim 7, wherein the second server is 
configured to: 

receive the session start packet from the first server in 

response to an access request from the mobile terminal; 
store the MSISDN number and the temporary IP-address 

in the database associated with the WAP gateway; and 
update the mapping session database by removing the 

MSISDN number and the temporary IP-address in 

response to a receipt of a stop packet. 

11. The system of claim 7, wherein the first server further 
generates a stop packet responsive to termination of a 
connection with the mobile terminal. 

12. The system of claim 7, wherein the system associates 
a MSISDN of a mobile terminal with a temporarily assigned 
IP address during at least one of an authentication process, 
a billing process and a personalization process. 

* * He t ft 
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(57) ABSTRACT 

A first network access point receives a first wireless link 
message from a first user terminal. The first wireless link 
message identifies the first user terminal. The first network 
access point or other system entity assigns an IP address to 
the first user terminal for use as a temporary mobile station 
identifier. The first network access point or other system 
entity installs a route for the IP address to a controller. The 
first network access point forwards a wireless link message 
to the user terminal specifying the IP address. The first or a 
second network access point receives another wireless link 
message from the first user terminal in which the first user 
terminal is identified with the IP address. The first or second 
network access point parses the message to determine the IP 
address and creates at least one standard IP packet desig- 
nating the IP address specified in the message. 'Fhe first or 
second network access point forwards the message to a 
router which routes the packet according to the IP address. 
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Dating network access point 40. For example, depending on 
the manner in which the IP address is selected, a static or 
dynamic route for the IP address is established according to 
well-known techniques. The network access point 40 
informs the user terminal 46 of the selected IP address in a 
message, which designates both the DID and the IP address. 

From this point forward in the communication protocol, 
the user terminal 46 uses the IP address as the MSID. For 
example, the user terminal 46 sends messages on the access, 
control, or traffic channels specifying the selected IP 
address. 

In one embodiment, whenever a new or originating net- 
work access point 40 receives a message from the user 
terminal 46, the network access point 40 parses the message 
to determine the IP address. Tlie network access point 40 
creates an IP packet using the IP address as the address. The 
network access point 40 passes the packet to the packet 
router 42, which routes the packet according to the IP 
address. In this way, it is not necessary for a new network 
access point 40 to access a system-wide memory bank to 
determine the routing of an incoming packet. Instead, the 
network access points 40 rely solely on the information 
received in the packet. The system automatically forwards 
the IP packet to the appropriate network access controller 
using well-known techniques. 

FIG. 3 is a flow chart illustrating operation in accordance 
with one embodiment. In block 100, a user terminal sends an 
initial access message to a network access point specifying 
a dummy identifier. In block 102, an IP address is assigned 
to the user terminal for use during this session. Note that at 
this time, the network access point may not know the actual 
identity of the user terminal. In one embodiment, the IP 
address can be chosen by a dynamic host control processor. 
Alternatively, the network access point may select the IP 
address from a static pool. In block 104, a route is installed 
for the IP address according to wellknown principles. For 
example, a route is established which routes the IP address 
to a controller or control functionality within the original 
network access point. In general, a route is established to a 
controller configured to control the operation of the user 
terminal throughout the current session such as to provide 
control point functionality; and the controller may be located 
within a variety of system elements. 

In block 106, the network access point sends a message to 
the user terminal using the dummy identifier as the MSID 
and specifying the designated IP address within the message. 
In block 108, the user terminal uses the IP address as a MSID 
and sends a message to the network access point. For 
example, in one embodiment, the message is a registration 
message. In another embodiment, the message carriers other 
overhead information or user data. In block 110, the network 
access point parses the message to determine the IP address. 
In block 112, the original network access point forwards a 
corresponding message to the router using the IP address as 
the source address. 

In a similar manner, other entities coupled to the router 
can send messages to the user terminal using the IP address. 
The messages are routed to the original network access point 
which maintains identification information for the user ter- 
minal. For example, if a second network access point 
receives a message from the user terminal, the second 
network access point creates a corresponding message using 
the IP address as the destination address and forwards the 
message to the router. For example, referring also to FIG. 2, 
assume that steps 100, 102, 104, and 106 have been per- 
formed so that the user terminal 46 has been assigned an IP 
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address and a corresponding route has been established to a 
controller assigned to the user terminal 46. Also assume that 
the network access point 40B is the originating network 
access point and that that controller is within the network 

5 access point 40B. Also assume that the current the user 
terminal 46 is within the coverage area of the network access 
point 40A. When the user terminal 46 creates a message, it 
creates a message identifying itself using the IP address. The 
message can be created according to the corresponding 
wireless link protocol. Ilie message is forwarded to the 
network access point 40A such as over a wireless link path 
60. The network access point 40A parses the message to 
determine the IP address. The network access point 40A 
creates a packet using the IP address as the destination 
address. The network access point 40A forwards the mes- 

^5 sage to the packet router 42 such as over a standard IP path 
62. The packet router 42 routes the packet to the controller 
within the network access point 40B such as over a standard 
IP path 64. 

The above-described methods and apparatuses are par- 
20 ticularly advantageous when used in conjunction with a 
system such as the QUALCOMMtg) HDR-2000 generaUy 
referred to as "QUALCOMM® High Data Rate Air Inter- 
face" and IS-95. In these systems, a 32-bit MSID is speci- 
fied. Because the IP address is also 32 bits, the use of an IP 
25 address as a MSID is particularly advantageous in these 
embodiments. 

The invention may be implemented in a variety of media 
including software and hardware. Typical embodiments of 
the invention comprise computer software which executes 
3Q on a standard microprocessor, discrete logic, or an applica- 
tion specific integrated circuit (ASIC.) 

The invention may be embodied in other specific forms 
without departing from its spirit or essential characteristics. 
The described embodiment is to be considered in all respects 
only as illustrative and not restrictive and the scope of the 
invention is, therefore, indicated by the appended claims 
rather than by the foregoing description. All changes which 
come within the meaning and range of equivalency of the 
claims are to be embraced within their scope. 

What is claimed is: 

1. A method of providing wireless services comprising: 
receiving a first wireless link message at a first network 

access point, the first wireless link message from a first 
user temiinal, the first wireless link message identify- 
ing the first user terminal; 

45 

assigning an IP address to a controller within an access 
network, the IP address used for controlling operation 
of the first user terminal, the controller storing a current 
state of a communication session for the first user 
terminal; 

assigning the IP address to the first user terminal for use 
as a mobile station identifier, the IP address being 
designated to a controller for controlling operation of 
the first user terminal throughout a communication 
session; 

installing a route for the IP address to the controller; 
forwarding a second wireless link message to the user 

terminal specifying the IP address; 
receiving a third wireless link message from the first user 
60 terminal wherein the first user terminal is identified 

with the IP address, and 
routing the third wireless link message to the controller 

using the IP address. 

2. The method of claim 1 further comprising parsing the 
65 third message to determine the IP address of the controller 

and creating at least one standard IP packet designating the 
IP address. 
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3. A system for providing wireless service comprising: 
a packet router; and 

a first network access point corresponding to a first 
coverage area, the first network access point coupled to 
the packet router and comprising: ^ 
means to receive wireless link signals from a user 

terminal within the first coverage area; 
means to establish a route within the packet router for 
an IP address, the IP address corresponding to con- 
trol functionality within the first network access 
point; 

means to assign the IP address as a Mobile Station 
Identifier for the user terminal; and 

means to receive messages from the user terminal 
Identified by the IP address as a Mobile Station 
Identifier (MSID), and route the messages to the 
network access point using the IP address. 

4. The system of claim 3 further comprising a second 
network access point coupled to the packet router, the 
second network access point comprising: 

means to receive wireless link messages from the user 

terminal within a second coverage area; 
means to parse the wireless link message to determine the 

IP address; and 25 
means to create a standard IP packet designating the IP 

address and pass the standard IP packet to the packet 

router. 

5. A system for providing wireless services comprising 
the steps of: 30 

means for receiving a first wireless link message at a first 
network access point, the first wireless link message 
from a first user terminal, the first wireless link message 
identifying the first user terminal; 
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means for assigning an IP address to the first user terminal 
for use as a Mobile Station Identifier (MSID), the IP 
address being assigned to a controller at the first 
network access point, the controller for controlhng 
operation of the first user terminal throughout a com- 
munication session, wherein the controller stores a 
current stale of the communication session for the first 
user terminal; 

means for installing a route for the IP address to a 
controller; 

means for forwarding a second wireless link message to 
the user terminal specifying the IP address; and 

means for receiving a third wireless link message from the 
first user terminal wherein the first user terminal Is 
identified with the IP address as the MSID. 

6. A network access point in a wireless communication 
system, the network access point adapted for communica- 
tion with an Internet Protocol (IP) network, the network 
access point comprising: 

a receiver adapted to receive a message from a user 
terminal and parse the message to determine an IP 
address of the user terminal, the IP address being used 
as a Mobile Station Identifier (MSID) and as a desti- 
nation IP address of a controller of an originating 
access point for the user terminal; 

controller for radio link layer management, signaling 
protocol management, and data link layer management 
over a wireless link; 

means for creating an IP packet using the IP address as the 
address; 

means for passing the packet to a packet router, which 
routes the packet according to the IP address. 

***** 
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[57] ABSTRACT 

A protocol for authenticating a cellular telephone to a 
service provider for the purpose of preventing the pi- 



racy of cellular services. A service provider assigns a 
unique "secret'*, along with other information such as a 
telephone number, to each cellular telephone when the 
telephone service is established with the service pro- 
vider. Each base station of a service provider continu- 
ously broadcasts a periodically changing random num- 
ber to all of the cellular telephones within the base 
station's jurisdiction. When a cellular telephone first 
enters the jurisdiction of a base station, it registers itself 
with the base station by concatenating a secret pass- 
word and the most recently broadcast random number, 
along with other information, and passing the concate- 
nated information to a hash function. The cellular tele- 
phone then sends the output of the hash function, along 
with other identifying information to the service pro- 
vider. The service provider, upon learning of the cellu- 
lar telephone*5 identity, feeds the secret assigned to that 
cellular telephone and the random number, along with 
other information, into the same hash function. When 
the result of the hashing performed by the service pro- 
vider matches that provided by the cellular telephone, 
authentication for that cellular telephone is complete. 
Thereupon, the provider sends the cell a shared secret 
data field which is known to the mobile unit, and subse- 
quent authentication processes are carried out between 
the mobile unit and the cell itself. 

39 Claims, 7 Drawing Sheets 
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II. The second stage of CMC is: 

1. for all values of i in the range 0=i<(d — 1)/2: 
b(i)=b(i)e(b(d-l-i) OR 1), where OR is the 
bitwise boolean OR operator. 

III. CMC*s final stage is the decryption that is inverse of 5 
the first stage: 

L Initialize a variable z to zero, 

2. For successive integer values of i in the range 
0^i<d 

a. form a variable q by: q=z© low order byte of i, 10 

b. form variable k by: k=TBOX[q], 

c. update z with: z=b(i)-|-2 mod 256, 

d. update b(i) with: b(i)=b(i)-k mod 256. 

The three stage process employed to encrypt and de- 
crypt selected control and data messages is illustrated in 15 
FIG. 10. In one preferred embodiment the first stage 
and the third stage are an autokey encryption and de- 
cryption, respectively. An autokey system is a time- 
varying system where the output of the system is used 
to affect the subsequent output of the system. For fur- 20 
ther reference regarding cryptography and autokey 
systems, see W. DifTie and M. E. Hellman, Privacy and 
Authentication: An Introduction to Cryptography^ Proc. of 
the I.E.E.E., Vol. 67, No. 3, March 1979. 

Mobile Unit Apparatus 

FIG. 11 presents a block diagram of a mobile unit 
hardware. It comprises a control block 200 which in- 
cludes (though not illustrated) the key pad of a cellular 
telephone, the hand set and the unit's power control 30 
switch. Control block 200 is connected to processor 210 
which controls the workings of the mobile unit, such as 
converting speech signals to digital representation, in- 
corporating error correction codes, encrypting the out- 
going digital speech signals, decrypting incoming 35 
speech signals, forming and encrypting (as well as de- 
crypting) various control messages, etc. Block 210 is 
coupled to block 220 which comprises the bulk of the 
circuitry associated with transmission and reception of 
signals. Blocks 200-220 are basically conventional 40 
blocks, performing the functions that are currently per- 
formed by commercial mobile telephone units (though 
the commercial units do not carry out encrypting and 
decrypting). To incorporate the authentication and 
encryption processes disclosed herein, the apparatus of 45 
FIG. 11 also includes a block 240 which comprises a 
number of registers coupled to processor 210, and a 
"personality" module 230 that is also coupled to proces- 
sor 210. Module 230 may be part of the physical struc- 
ture of a mobile telephone unit, or it may be a rcmov- 50 
able (and pluggable) module that is coupled to the mo- 
bile telephone unit through a socket interface. It may 
also be coupled to processor 210 through an electro- 
magnetic path, or connection. In short, module 230 may 
be, for example, a "smart card". 55 

Module 230 comprises a Jumble processor 231 and a 
number of registers associated with processor 231. Al- 
ternately, in another preferred embodiment, only the 
A-Key is in the module 230. A number of advantages 
accrue from installing (and maintaining) the A-key, and 60 
the MINI and MIN2 designations in the registers of 
module 230, rather than in the registers of block 240. It 
is also advantageous to store the developed SSD field in 
the registers of module 230. It is further advantageous 
include among the registers of module 230 any needed 65 
working registers for carrying out the processes of pro- 
cessor 231. By including these elements in module 230, 
the user may carry the module on his person to use it 
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with different mobile units (e.g. "extension" mobile 
units) and have none of the sensitive information be 
stored outside the module. Of course, mobile units may 
be produced with module 230 being an integral and 
permanent part of the unit. In such embodiments, Jum- 
ble processor 231 may be merged within processor 210. 
Block 240 stores the unit's ESN designation and the 
various RAND sequences that are received. 

Although the above disclosure is couched in terms of 
subscriber authentication in a cellular telephony envi- 
ronment, and that includes personal communication 
networks which will serve portable wallet sized hand- 
sets, it is clear that the principles of this invention have 
applicability in other enviromnents where the commu- 
nication is perceived to be not sufficiently secure and 
where impersonation is a potential problem. This in- 
cludes computer networks, for example. 

We claim: 

1. A method, carried out by a customer unit that 
maintains a code sequence, for establishing a communi- 
cations channel with a base station, comprising the steps 
of: 

receiving from the base station a digital signal se- 
quence; 

developing a string which includes the code se- 
quence, the digital signal sequence, and a sequence 
of bits that is characteristic of the customer unit; 
hashing the string to develop a hashed string; and 
using the hashed string in further communications 
with the base station. 

2. The method of claim 1 wherein said sequence of 
bits that is characteristic of the customer unit includes a 
bit string that is unique to the customer unit hardware 
(ESN designation) and a bit string that is assigned to 
said unit as a customer of a service provider (MIN 
designation). 

3. The method of claim 1 wherein said step of devel- 
oping the hashed string is carried out pursuant to a 
directive from said base station. 

4. The method of claim 1 including a step of initiating 
the steps of receiving, developing, hashing and using 
said hashed string when said base station desires to 
direct said customer unit to create a replacement for 
said hashed string. 

5. The method of claim 1 further comprising the step 
of enciphering customer data signals with the aid of a 
portion of said hashed string. 

6. The method of claim 1 wherein said step of using 
the hashed string in further communication employs the 
hashed string in a plurality of communications sessions 
through the communication channel. 

7. The method of claim 1 further comprising the steps 
of: 

creating a challenge string, 
Uansmitting the challenge string, 
forming an authentication string that comprises the 
challenge string, said sequence of bits that is char- 
acteristic of the customer unit, and at least a por- 
tion of the hashed string; 
hashing the authentication string to form a hashed 

authentication string; 
receiving a verification string in response to said step 

of transmitting the challenge string; 
comparing the received verification string with the 

hashed authentication string; and 
transmitting results of said step of comparing. 

8. The method of claim 1 further comprising a step of 
irifying that the base station recognizes the hashed 
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String developed by said customer unit to be a valid 
hashed string. 

9. The method of claim 8 wherein said step of verify- 
ing comprises the steps of: 

developing a challenge sequence; 

sending said challenge sequence to said base station; 

forming an authentication string from a concatena- 
tion of said challenge sequence, said hashed string 
and selected other information; 

hashing said authentication string to form a hashed 
authentication string; 

receiving a hashed signal from said base station that is 
related to said challenge sequence sent to said base 
station; 

comparing said hashed authentication string with said 

hashed signal; and 
reporting to said base station results of said step of 

comparing, 

10. A method, carried out by a customer unit that 
maintains a code sequence, for establishing a communi- 
cations channel with a base station, comprising the steps 

of: 

receiving from the base station a digital signal se- 
quence; 

developing a string which includes the digital signal 
sequence, a sequence of bits that is characteristic of 
said customer unit and a key derived from the code 
sequence; 

hashing the string to develop a hashed string; and 
sending the hashed string to the base station. 

11. The method of claim 10 wherein said base station 
has no knowledge of said code sequence. 

12. The method of claim 10 wherein the sequence of 
bits is nonsecret. 

13. The method of claim 10 wherein the customer 
unit is mobile and the base station is non-mobile. 

14. The method of claim 10 wherein the established 
communication channel is a wireless communication 
channel. 

15. The method of claim 10 wherein the established 
communication channel is a cellular radio communica- 
tion channel. 

16. The method of claim 10 further comprising the 
steps of determining that the mobile customer unit has 45 
entered the jurisdiction of the base station. 

17. The method of claim 10 wherein said step of send- 
ing the hashed string also sends at least a portion of said 
string. 

18. The method of claim 10 including a step of initiat- 
ing the steps of receiving, developing, hashing and 
sending said hashed string when said customer unit 
desires to initiate a call, 

19. The method of claim 10 including a step of initiat- 
ing the steps of receiving, developing, hashing and 
sending said hashed string when said base station desires 
to activate said customer unit to receive a call. 

20. The method of claim 10 including a step of initiat- 
ing the steps of receiving, developing, hashing and 
sending said hashed string when said base station desires 60 
to re-authenticate said customer unit. 

21. A method, carried out by a customer unit that 
maintains a code sequence, for establishing a communi- 
cations channel with a base station that has no knowl- 
edge of said code sequence, comprising the steps of: 

(a) receiving from said base station a digital signal 
sequence; 

(b) developing a string which includes 



(1) a substring containing a sequence of bits that is 
characteristic of said customer unit, 

(2) a substring that is related to a specified action to 
be taken by said customer unit, which substring 
is selected from a set comprising 

(i) a null string, 

(ii) a string of bits corresponding to a number 
assigned to said customer unit, and 

(iii) a string corresponding to the number of 
another customer unit to which connection is 
sought, 

(3) a substring containing said digital signal se- 
quence, and 

(4) a substring containing a key derived from said 
code sequence; 

(c) hashing said string to develop a hashed string; and 

(d) sending said hashed string to said base station. 

22. The method of claim 21 further comprising a step 
of receiving from said base station an indication of the 
action to be taken by said customer unit. 

23. The method of claim 21 wherein the sequence of 
bits that is characteristic of the customer units com- 
prises the customer unit's phone number. 

24. The method of claim 21 wherein the sequence of 
bits that is characteristic of the customer units com- 
prises the customer unit's electronic serial number. 

25. A customer unit for communicating with a sys- 
tem, said customer unit including first means (200) for 

2Q developing call initiation control signals and call 
progress control signals second means (210, 230, 240) 
responsive to said call initiation control signals and call 
progress control signals for establishing and maintaining 
a communication channel with said system in accor- 
dance with a protocol third means (200) for creating 
data signals, and fourth means (220) for applying the 
data signals and the call control signals to said commu- 
nication channel, said second means CHARACTER- 
IZED BY: 

a processor responsive to said third means and said 

fourth means; 
means A (a register in block 240) for developing an 
identifier signal that is unique to said customer imit; 
means B for storing (240) a temporary string signal 

(RAND) received from said system; 
means C for storing (232) an identifier signal (MIN) 
supplied by an owner of said system, a code se- 
quence key signal (A-key) supplied by said owner 
of said system, an authentication key signal (SSD- 
A), and a speech encryption key signal (SSD-B); 
means D (231) responsive to said processor for hash- 
ing an applied string and developing thereby a 
hashed output; 
means E for applying said authentication key to 
means D. 

26. The customer unit of claim 25 wherein said tem- 
porary string maintained in means B is repetitively up- 
dated from a signal provided by said fourth means. 

27. The customer unit of claim 26 wherein the time 
duration between successive updates of said temporary 
string is less than the expected time duration between 
the application of call initiation control signals. 

28. The customer unit of claim 25 wherein said pro- 
cessor, upon receipt of a signal from said fourth means 
that directs the creation of a new authentication key 
signal and a new speech key signal, applies hashed out- 
put signals of means D to means C to modify said au- 
thentication key signal and said speech key signal. 
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29. The customer unit of claim 28 wherein the hashed 
output of means D is a muhi-bit binary word, one por- 
tion of said binary word constitutes said authentication 
key signal, and another portion of said binary word 
constitutes said speech key signal. ^ 

30. The customer unit of claim 25 wherein at least the 
portion of means C that stores the code sequence key 
signal is in a removable module. 

31. The customer unit of claim 30 wherein said mod- jq 
ule is adapted to be connected to said processor via 
electrical contacts. 

32. The customer unit of claim 30 wherein said mod- 
ule is adapted to be connected to said processor via 
electromagnetically coupled connections. 15 

33. A method carried out by a communications sys- 
tem for establishing a communications channel with a 
customer unit comprising the steps of: 

maintaining an authentication key of said customer 
unit; 

receiving a first hashed authentication string from 

said customer unit; 
forming a local authentication string by combining 

said authentication key with other information; 25 
hashing said local authentication string to form a 

local hashed authentication string; and 
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comparing said local hashed authentication string 
with the first hashed authentication string. 

34. The method of claim 33 further comprising the 
step of maintaining a designation of said customer unit 
that is provided to said system and is unique to said unit 
(MIN) and a code sequence designation of said cus- 
tomer unit (A-key). 

35. The method of claim 34 further comprising the 
step of maintaining an ESN designation of said unit. 

36. The method of claim 35 further comprising the 
steps of: 

developing a number; 
transmitting said number; 

developing said authentication key by bashing a 
string comprising said number, said ESN designa- 
tion and said code sequence designation of said 
customer unit in accordance with a hashing func- 
tion. 

37. The method of claim 33 further comprising the 
steps of 

developing a number; and 

broadcasting said number to said customer unit. 

38. The method of claim 37 wherein said number is 
pseudorandom. 

39. The method of claim 37 wherein said number is 
random. 

***** 
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[57] ABSTRACT 

A PABX cordless telephone system comprising a base 
station (10) and a plurality of handset (HSl to HS5). 
The base station is connected to the public switching 
network and conununicates with each handset by way 
of a respective duplex radio link. The operation of the 
PABX system is controlled by a micro-controller (16) in 
the base station. Micro-controllers are also present in 
each of the handsets. Security in the radio communica- 
tion via the duplex radio links is provided by assigning 
an n-bit security address code, where n for example 
comprises 16 bits, to each handset. The signalling proto- 
cols in setting-up calls require the transmission of the 
full a-bit security code. In the interim periods the base 
station (10) carries out a secxirity check on the handsets 
forming its system. Time, memory capacity in the mi- 
cro-controllers and battery current can be saved while 
simultaneously achieving a high degree of security if the 
security check is carried out using m bits of the security 
codes where m<n and m is typically equal to 8. 

14 Ciaimst 3 Drawing Sheets 
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security code have been transmitted. Thereafter the When the base station receives a call for one of its 

micro-controller 62 activates the transmitter section of handsets, it transmits a code word comprising the 16 bit 

the handset and the security code is sent back to the security code of the handset and, if applicable, the iden- 

base station micro-controller 16 via a radio link. tification number of the handiset. The identification 
The old security code wUl be overwritten by the new 5 number is necessary in those cases, there are two or 

security code once the transmitted and received code more handsets forming extensions and each is allocated 

words are equal. Until that time the old code remains the same security number. The addressed handset ac- 

valid. Thus picking-up the handset during code trans- knowledges the receipt of the code word and at the 

formation will have no consequence for the user be- same time causes its microphone amplifier and audio 
cause last written security code remains valid. 10 amplifier to be energized. 

If the received code is not correct, the procedure will In a PABX system employing cordless telephones it 
be repeated as long as the returned code is not equal to is desirable for the base station to monitor the status of 
the code as transmitted by the base station. This tech- each the handsets, that is for example whether it is on 
nique is useful to confirm that the battery in the handset standby, participating m a call involving the public 
is recharged at least to an arbitrary minimum extent 15 switching network, or involved m an intercom call. In 
because there must be enough power in it to retransmit order to do this check the micro-controller interrogates 
the security code back to the base station via the radio each handset in turn using the control part of each chan- 
link. Cycling of successive security codes can take place nel, that is the FSK signalling centred on 7.0 kHz. In 
every 9.4 ms. order to economise on the time taken in making the 
Once a handset has been removed from a socket 18 20 check bearing m mind the signalling rate of 115 bits per 
(FIG. 1) and is switched-on, security codes are trans- second and the desire to maintain a high degree of secu- 
mitted to the base station 10. The received codes are rity the micro-controller 16 scans the channels sequen- 
checked by the micro-controller 16 in the base station tially by transmitting m of the n (where n>m) bits of 
10 and if equal, the base station transmitter is switched the security code. This is illustrated in FIG. 7 of the 
on and will send an acknowledgement signal. In order 25 drawings which assumes that the PABX has ten chan- 
to allow time for checking the security code and nels CI to CIO. In the case of a 16 bit security code, 
switching-on of the transmitter oscillator 26 (FIG. 2), a m=8. The 8 bits may be the least significant bits of the 
wait time of 20 ms is built-in before the acknowledge- code, the most significant bits or bits selected from a 
ment is sent-out part intermediate the least and most significant bits, 
FIG. 5 illustrates a 25-bit code word 66 which is 30 Security scanning using m out of n bits has an advantage 
transmitted by the handset when it is switched on and a over using the entire n bits because less buffer memory 
4-bit acknowledgement signal 68 transmitted by the capacity has to be reserved in the base station micro- 
base station. The code word 66 comprises a syn- controller 16 and the memory capacity saved in this 
chrononisation bit 70, eight bits 72 of information and a way is available for use in other operations by the mi- 
16 bit security word 74. This code word 66 is sent out 35 cro-controller 16. A further saving in time and memory 
by the handset at a speed of 1 1 5 bits/second. The hand- capacity can be achieved by not carrying out a security 
set waits for 64 ms and if an acklowledgement has not check on those channels occupied by an intercom caU. 
been received in the meantime then it repeats the send- In any event the security check which it is desirable to 
ing of the code word 55 providing the handset is still on make every one or two seconds can be completed in less 
and an acknowledgement has been received. The ac- 40 than one second, more particularly in 80/115 seconds, 
knowledgement signal comprises an instruction that Battery current in the handsets is also saved by this 
diallmg data is to be sent. measure because in the stsmdby mode the receiver in 
The dialling data has been formulated in accordance each handset need only be switched-on for approxi- 
with a byte-oriented format to ensure the correct func- mately half the time that a receiver has to be if n bits of 
tioning of the entire system. The byte-oriented format 45 security code are transmitted. 

comprises The handsets respond to the security check byte 

(1) a first half byte, sending the same m bits as were transmitted by the base 

(2) a second half byte, and station together with an indication of their statuses. 

(3) subsequent bytes. Once the response has been sent the transmitters in the 
FIG. 6 illustrates a first code word transmitted by a 50 handsets are switched-off. 

handset to a base station. This code word is constituted In the event of a handset wishing to make a call or the 

by four parts. The first part comprises the 16-bit secu- base station receiving a call for a handset during the 

rity address code 76, the second part 78 comprises selec- security check then the call set-up between the base 

tion information for DTMF selection, if this form of station and the handset is delayed until the security 

dialling is available for use, the third part 80 coniprises 55 check is completed. As the delay is less than one second 

selection information for pulse dialling selection, if this than this is within the specification of many nationally 

form of dialling is available for use, and the fourth part approved telephone systems. 

82 is the handset identification number of the calling What is claimed is: 

party. For ttie purpose of synchronisation it is necessary 1. A PABX cordless telephone system comprising a 

for the first transmitted code word to be preceded by 60 base station and a plurality of disconnectable handsets, 

some synchronising pulses. the base station and the handsets each having a respec- 

In the second code word the relevant dialling infor- tive transceiver for communication to and from each 
mation is sent, for example the trunk-dialling code and other by way of a respective duplex radio Unk, the base 
the called party^s number. In order to obviate the im- station having a micro-controller for controlling the 
perfections of the radio channel, redundancy has been 65 system, and each handset having a respective micro- 
used for transmission via the radio channel. controUer for conUolling various functions in the hand- 

The receipt of these code words by the base station is set, each respective micro-controller m the handsets 

acknowledged. including a respective memory for storing a respective 
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n-bit security address code which is used in call set-up 
protocol with the base station and the micro-controller 
in the base station including a memory for storing all the 
respective security address codes, wherein the micro- 
controller in the base station is programmed to carry 
out security checks on the handsets by using m bits of 
the respective security address codes where m<n. 

2. A system as claimed in claim 1, wherein the secu- 
rity check is made using the m-least significant bits of 
each isecurity address code. 

3. A system as claimed in claim 1, wherein n= 16 and 
m=8. 

4. A system as claimed in claim 1, wherein 

(a) each handset has a rechargeable battery, 

(b) the base station has means for recharging the 
battery in place in each handset, the recharging 
means including battery charger contacts, 

(c) the micro-controller in the base station includes a 
pseudo-random counter which is electrically cou- 
pled via the battery charger contacts and the re- 
chargeable battery to the micro-controller in the 
handset so that the security address code of the 
handset is changed to a new security address code 
during recharging, 

(d) the micro-controller in the handset causes its 25 
transceiver to transmit the new security address 
code via the duplex radio link to the base station, 

(e) the micro-controller in the base station has means 
for comparing a received security code with the 
new security address code and if they are equal for 30 
instructing the seciirity address code stored in the 
memories of the micro-controllers of the base sta- 
tion and the relevant handset to be overwritten by 
the new security address code. 

5. A systena as claimed in claim 1, wherein the secu- 
rity check by the base station micro-controUer is ef- 
fected by scanning its associated handsets in sequence. 

6. A method of operating a PABX cordless telephone 
system comprising a base station and a plurality of hand 



8 



call set-up protocols the full n-bit security codes are 
used in duplex radio links between the base station and 
the handsets and wherein the base station makes secu- 
rity checks on the handsets using m bits of the n-bit 
5 security code address, where m<n. 

7. A method as claimed m claim 6, wherein the du- 
plex radio, links are scanned sequentially by the base 
station. 

8. A method for operating a PABX cordless tele- 
10 phone system which includes a base station and a plural- 
ity of disconnectable handsets, each respective handset 
having a respective n-bit security address code which is 
stored in both the base station and in the respective 
handset, comprising the steps of: 

a. transmitting the full n-bit security address codes in 
duplex radio links to and from the base station and 
the handsets, during call set-up protocols; and • 

b. making security checks of the handsets, in the base 
station, using m bits of the n-bit security address 
codes, where m<n. 

9. A method as claimed in claim 6, wherein n= 16 and 
m:=8. 

10. A system as claimed in claim 2, wherein n=: 16 
and m=8. 

11. A method as claimed in claim 8 comprising the 
step of carrying out signalling associated with the secu- 
rity checks in a first part of a channel frequency band 
above a second part of the channel frequency band, 
which second part is used for speech. 

12. The method of claim 8 wherein the making step 
comprises using the m least significant bits of the secu- 
rity code addresses. 

13. The method of claim 8 wherein the making step 
comprises signalling in a part of the channel frequency 
band above that used for speech. 

14. The method of claim 8 further comprising the step 
of scanning the respective duplex radio l.inks sequen- 
tially, said scanning step being performed by the base 
station and including one said transmitting step and one 
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sets, each handset having an n-bit security address code 40 said making step for each respective duplex radio link, 
which is also stored in the base station, wherein during * * * - - 
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Abstract (Basic) : 

One or more external networks are connected to a general packet 
radio service (GPRS) system by identifying each network with an 
access point name (APN) for assigning its gateway address. An 
APN-external network authentication request from a gateway GPRS support 
node (GGSN) is . . . 

... In RADIUS -accounting communication for assigning unique 

identifiers allowing communication between a GPRS (General Packet 
Radio Service) -system and a RADIUS (Remote Authentication Dial In User 
Service) server. . . 
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ABSTRACT 



A method for assigning unique identifiers for allowing 
communication between a GPRS (General Packet Radio 
Service) system and a RADIUS (Remote Authentication 
Dial In User Service) server. The method includes the steps 
of connecting one or more external networks to the GPRS 
system and identifying the or each network with an APN 
(Access Point Name), and assigning to an or each APN 
external network a gateway address. Further steps include 
passing an APN-extemal network authentication request 
from a GGSN (Gateway GPRS Support Node) to said 
RADIUS server, providing from said RADIUS server to said 
GGSN upon such request a subscriber IP (Internet Protocol) 
address to be stored in said GGSN (Gateway GPRS Support 
Node), said subscriber IP address being unique for the 
respective APN external network defined in said GGSN, 
using said GGSN for combining the APN gateway address 
and the subscriber IP address, to form a unique subscriber 
identifier, and sending from said GGSN said identifier to the 
RADIUS server for accounting, e.g. in the form of an ASCII 
string. 



AAS 







GGSN 

3. Gefierale identifier 
-129.24.24.1.129.24.24^ 
4" to send to RADIUS 



Gw: 129.24.24.1 
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external network. By assuring that this IP- address is unique 
for each APN defined in the GGSN, all the external networks^ 
will have its own, unique identifier. Since two subscribers 
(MS) in the same external network should never use the 
same IP- address at the same time, subscribers connected to 
the same APN will always have different IP-addresses. The 
idea is to combine these two IP-addresses, the gateway- 
address for the APN and the address assigned to the sub- 
scriber, to form the identifier 

[0027] When the GGSN receives an IP-address to send to 
the subscriber from the RADIUS-server, it looks up the 
gateway-address belonging to the external net to which the 
subscriber is connecting himself. This address has already 
been configured when the external network is attached to the 
GPRS-system, and checked to be unique within the GGSN. 

[0028] To construct the identifier to send to the RADIUS 
accounting-server the GGSN will now use these two avail- 
able IP-addresses. The addresses can be appended to form a 
eight byte long identifier (in case of IP-addresses from IP 
version 4), or the numbers could be converted to ASCII 
numbers to make the string printable. When the numbers are 
converted it would be wise to insert dots (ASCII value 46) 
between the decimal-groups in the addresses to be able to 
clearly see the addresses used in the identifier (e.g. for an 
operator looking into the accounting records). 

[0029] Gateway-address-129.24.24.1 

[0030] MS IP-address=129.24.24.24 

[0031] ASCII codes: 129 24 24 1 129 24 24 24 (non 
printable) 

[0032] Or transform the number to ASCII codes for the 
numbers to make them printable: 

[0033] ASCII codes: 49 50 57 46 50 52 46 50 52 46 49 46 
49 50 57 46 50 52 46 50 52 46 50 52 (which would be 
readable as 129.24.24.1. 129.24.24.24") 

[0034] The identifier is suitably passed to the RADIUS 
server as an ASCII string. (See FIG. 1). 

[0035] Thus, the gateway address is the address of the 
GPRS-system/GGSN as seen from the external network 
(APN, e.g. APNl) and the subscriber could be a mobile 
terminal MS connected to the external network through the 
GPRS-system. 

[0036] On FIG. 2, the subscribers MSI, MS2 and MSB 
have for sake of reference to their respective networks 
APNl, APN2 and APN3 been indicated on the right hand 
side of the drawing figure. 

[0037] The APN name and the respective APN gateway 
address to the GGSN seen from the network are configured, 
as such new network is linked to the GPRS system. The 
operator will normally manually assign the APN name and 
the gateway address, and the RADIUS server is not involved 
in such operation. 

[0038] FIG. 2 shows three external networks connected to 
a GGSN node in a GPRS system. Each network has one 
subscriber connected and all the three networks use the same 
RADIUS server for authentication and dynamic IP-address 
allocation for the subscribers. Even though the networks 
identified as APN2 and APN3 has assigned the same IP- 
address to the two subscribers, the identifier will be unique 
because of the different gateway addresses. Table I shows 
the generated identifiers for the three subscribers. 



TABLE 1 







Subscriber IP 




APN 


Gateway Address 


Address 


Identifier 


APNl 


129.24.24.1 


129.24.24.24 


"129.24.24.1.129.24.24.24" 


APN2 


193.25.01 


193.25.5.1 


"193.25.0.1.193.25.5.1" 


AFN3 


193.26.0.1 


193.25.5.1 


"193.26.01.193.25.5.1" 



[0039] Advantages 

[0040] The creation of the identifier used for accounting 
purposes described above will not involve any new 
resources than the ones already available. Since the 
addresses already arc unique, the combination of the two 
addresses will form a perfectly valid identifier. This will not 
restrict any limitations on concurrency regarding RADIUS 
accounting messages, and the identifier is guaranteed unique 
as long as the subscriber is still using the assigned IP-address 
(i.e. no accounting stop has been sent towards the RADIUS 
server). The creation of the identifier will not use any extra 
resources whatsoever, and will always be available as long 
as an IP-address exists. 

[0041] The identifier will also be very predictable, and 
only by looking at this one can tell which external network 
the accounting record belongs to, as well as knowing the 
IP- address for the subscriber. 

[0042] Whenever several IP-addresses are available, 
which together will identify the object in question uniquely, 
these addresses can be concatenated to form a unique 
identifier. 

1. A method for assigning unique identifiers for allowing 
communication between a GPRS (General Packet Radio 
Service) system and a RADIUS (Remote Authentication 
Dial In User Service) server, the method including the steps 
of: 

connecting one or more external networks to the GPRS 
system and identifying the or each network with an 
APN (Access Point Name), and 

assigning to an or each APN external network a gateway 
address, 

and the further steps of: 

passing an APN-extemal network authentication 
request from a GGSN (Gateway GPRS Support 
Node) to said RADIUS server, 

providing firom said RADIUS server to said GGSN 
upon such request a subscriber IP (Internet Protocol) 
address to be stored in said GGSN (Gateway GPRS 
Support Node), said subscriber IP address being 
unique for the respective APN external network 
defined in said GGSN, 

using said GGSN for combining the APN gateway 
address and the subscriber IP address, to form a 
unique subscriber identifier, and 

sending fi-om said GGSN said identifier to the RADIUS 
server for accounting, e.g. in the form of an ASCII 
string. 

2. The method according to claim 1, wherein: 

Two or more of said APN external networks are provided 
with same subscriber IP address, but different gateway 
addresses to yield different unique APN identifiers. 
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3. The method according to claim 1, wherein 

Two or more subscribers are present in at least one of said 
networks, each subscriber in a common network being 
provided with its own subscriber IP address, but same 
network gateway address. 



4. The method according to claim 1, wherein 

The identifier is a code string having as a first element the 
gateway address of the APN external network in ques- 
tion and as a second element the subscriber IP address 
appended thereto. 

* « * 4^ * 
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Abstract (Basic) : 

... A measurement order comprising list of candidate channel is 

transmitted to mobile station. Based on received signal strength, 
optimum candidate channel is selected . Data within time window of 
channel is read and processed by searching identification ( ID ) 
codes. Then, the ID code is correlated with received signal 
measurements, to identify optimal candidate base station for 
effecting handoff. 

List of candidate channels are generated for possible acceptance 
of communication handoff between mobile and base stations . The 
current base station transmits a first measurement order containing 
list of candidate channels to mobile station, in which received 
signal strength corresponding to each candidate channel is listed in 
measurement order. Based on measured signal strength, most favorable 
candidate channel is selected . Then, another measurement order 
containing most favorable channel is transmitted to the mobile 
station. The candidate channel is tuned by reading data within time 
window on candidate channel... 

...synchronization word within the read data. Then, the read data is stored 
in memory of mobile station, after which data is processed by 
searching identification code from first predetermined number of . . . 

...of symbols. The identified code has digital voice color code word in 

candidate channel. The mobile station transmits the ID codes of each 

channel to current base station . The ID codes are correlated with 
received signal measurements, to identify an optimal candidate base 
station for effecting handoff of communication... 

...To effect communication link between mobile and base stations in 
digital cellular communication network. . . 

...Improves quality of handoff decision by allowing mobile station to 
synchronize with candidate base station for identity 



verification , thus reducing the probability of a dropped call due to 
erroneous handoff decision... 

...The figure shows flow chart of mobile assisted handoff method... 
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ABSTRACT 



A system and method for improved mobile assisted hando£[ 
in a digital cellular communication system that gives the 
mobile station the ability to synchronize to candidate base 
station transmissions in order to read the transmitted digital 
voice color code (DVCQ of the candidate station. This 
process is performed during the idle period between two 
designated time slots in a TDMA frame. The invention is an 
enhancement to the existing mobile assisted handott' proce- 
dures described in the existing IS-136 standard. The present 
invention improves on the IS-136 standard's use of received 
signal strength measurements in that it allows the mobile 
station to acquire and report information regarding the 
digital verification color code (D VCC) of the candidate base 
station channels. Since the DVCC uniquely identifies the 
cell site to which a channel belongs, it is used to distinguish 
the candidate base station channel from its co-channel 
interferers, allowing the network to make a more informed 
handoff decision. 

3 Claims, 3 Drawing Sheets 
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Memory Requirements: 

681*2=1362 bits for Serial Correlation Method 
1816*2=3632 bits for Parallel Correlation Method 
It is worth noting, that the simulation results contained 
herein assume "rectangular'* pulse shapes. In the actual 
IS- 136 system, low pass filtering is employed in the trans- 
mitter as defined in the IS -13 6 standard. Filtering is also 
typically employed in the receiver. The effect of filtering is 
to degrade the performance from that predicted in FIGS. 5 
and 6, but the degree of degradation is expected to be 
negligible. 

It is anticipated that these processing and memory 
requirements are either already within the limitations of 
existing digital cellular mobile stations or are within modi- 
fications easily implemented in existing mobile stations. Tlie 
method of the present invention is, therefore, capable of 
implementation within the current confines of the IS-136 
format and the technology associated with the tuning and 
data acquisition rates of existing mobile stations. 

Although the present invention has been described in 
conjunction with a pre-defined format, it is anticipated that 
the steps involved in the present invention are applicable 
under a greater variety of conditions and formats than those 
described herein. The more specific scope of the present 
invention can best be identified by reference to the following 
claims. 

We claim: 

1. A method for mobile assisted handoff of a communi- 
cation link between a mobile station and a base station in a 
digital cellular communications network, from a current 
base station to one of a number of candidate base stations 
within said network, said method comprising the steps of: 

generating a list of a plurality of candidate channels for 
possible acceptance of said communication handoff; 

transmitting a first measurement order from said current 
base station to said mobile station, said first measure- 
ment order containing said list of candidate channels; 

measuring a received signal strength and a bit error rate at 
said mobile station for said communication between 
said mobile station and said current base station; 

measuring received signal strength at said mobile station 
for each of said candidate channels listed in said first 
measurement order; 

transmitting said received signal strength measurements 
from said mobile station to said current base station; 

selecting a plurality of most favorable candidate channels 
from said received signal strength measurement results; 

transmitting a second measurement order from said cur- 
rent base station to said mobile station, said second 
measurement order containing a list of said most favor- 
able candidate channels; 

tuning and synchronizing said mobile station to each of 
said candidate channels listed in said second measure- 
ment order, said step of tuning and synchronizing 
including: 

tuning into said candidate channel, reading data within 
a time window on said candidate channel; 

correlating said data from said candidate channel with 
a plurality of known synchronization words and 
identifying a most probable synchronization word 
within said data; and 

returning back to said current base station channel; 
reading and decoding an identification code for each of 65 

said candidate channels, said step of reading and 

decoding including: 
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storing said data from said candidate channel into a 

memory device located on said mobile station; 
processing said data by searching for said identification 
code at a first predetermined number of symbols 
after the appearance of said probable synchroniza- 
tion word and, if said identification code cannot be 
found at said first predetermined number of symbols 
after said probable synchronization word, then 
searching for said identification code at a second 
predetermined number of symbols ahead of said 
probable synchronization word; and 
identifying said identification code, said identification 
code comprising a digital v^oice color code word in 
said candidate channel; 
transmitting said identification codes for each of said 
candidate channels from said mobile station to said 
current base station; 
monitoring threshold received signal strength values for 
said current channel and said candidate channel, said 
threshold values determining when selection and acti- 
vation of said handoflf should occur; and 
correlating said received signal strength measurements 
with said identification codes to identify an optimal 
candidate base station for effecting said handoff of said 
communication. 

2, The method of claim 1 wherein said digital communi- 
cation channels are formatted according to IS-136 standards 
for digital cellular radio communication and said candidate 
channel received signal strength measurements and said 
identification code readings are made by said mobile station 
during idle time slots within a firame. 

3. An improved digital cellular communications system 
formatted according to IS-136 standards for digital cellular 
communication, the improvement comprising mobile station 
and base station elements for identifying candidate base 
stations for a communication handoff, making signal 
strength measurements on said candidate base stations, and 
selecting one of said candidate base stations to receive said 
communication handoff', said improved system comprising: 

a current base station, said current base station being in 
communication on a current channel with a mobile 
station, said current base station having a memory for 
storing a first list of candidate base stations, said 
candidate base stations being those base stations proxi- 
mate to said current base station and to which set 
communication handoff' could occur; 

a plurality of candidate base stations transmitting on a 
plurality of candidate channels, said transmissions con- 
taining synchronization and identification data; 

a mobile station in communication with said current base 
station, said mobile station comprising: 
means for making received signal strength measure- 
ments on said current channel and on said candidate 
channels; 

means for tuning to said candidate channels and return- 
ing to said current channel; 

means for synchronizing to said candidate channels 
including a data processing device and a memory 
device, said data processing device for correlating 
data on said candidate channel with known synchro- 
nization data and said memory device for storing 
said correlation and synchronization data, said data 
processing device and said memory device located 
on said mobile station, said data processing device 



2/13/2006, EAST Version: 2.0.1.4 



6,044,; 

11 

able to perform at least at a rate of a predetermined 
number of operations per measurement period and 
said memory device having at least a predetermined 
number of bits of memory; 
means for readings said identification data on said 5 
candidate channels including said data processing 
device and said memory device, said data processing 
device for locating and decoding said identification 
data on said candidate channel and said memory 
device for storing said identification data; and 



12 

means for correlating said received signal strength mea- 
surements with said identification data and identifying 
from said correlation and optimal candidate base sta- 
tion to receive said communication handoff, said means 
for correlating said received signal strength measure- 
ments with said identification data comprises a data 
processing device located at said current base station. 

♦ * * ♦ * 
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request by the mobile phone to the base station to connect a 
wireless call. A unique interrogation address is transmitted in 
response to the request a from the base station to the mobile 
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station , the expected code word residing at the location specified 
by the unique interrogation address... 

. . .A unique code word is retrieved from a memory within the mobile 

phone, the unique code word residing at the location specified by 
the unique interrogation address. The unique code word is 
transmitted from the mobile phone to the base station . It is 
verified that the expected code word fetched from the base station 
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[57] ABSTRACT 

A wireless-based communications system is provided with a 
method and apparatus for automatic verification of the 
identity of a mobile phone user in order to eliminate cellular 
piracy. A first embodiment implements a memory-based 
verification and a second embodiment implements an algo- 
rithm-based verification to reduce memory space require- 
ments. The call is allowed when verification passes and is 
disallowed when verification fails. 
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phone calls directly to the user's mobile phone or landline 
phones, paging messages to the user's mobile phone (if 
equipped with. this feature),, or written notification (e.g. mail 
or fax); Additionally, every. time a call passes initial verifi- . 
cation, the system will interrupt the beginning of the call to 5 
play a short message indicating that there were multiple 
failed call attempts. This message would continue to play 
every time a call passes verification until ERRFLG is reset. 
If the legitimate user believes that illegitimate call attempts 
have been made, he/she can request a change in the PIN 
from the service provider. After the PIN has been changed, 
the error flag ERRFLG would then be reset. If the legitimate . 
user does not suspect unauthorized use, ERRFLG would be 
reset and service would resume normally. 

The error routine of FIG, 5 is implemented by the error 15 
logic 24 by using any means known in the art for accom- 
plishing the required functions (e.g. counting means, com- 
parator means and the like). 

For privacy and security applications, the code words can 
also be used to scramble voice and data during calls. 20 
. Although the methods and apparams of the present inven- 
tion has been described with reference to the verification of 
a mobile phone in a cellular phone system, such methods 
and apparatus can also be used in new emerging wireless 
systems such as the Personal Communications Services 25 
(PCS) and wireless LAN applications. In addition, said 
verification system can be implemented in; any wireless 
communications system which may be susceptible to piracy 
by illegitimate users. 

I claim: 30 

1. A method for a base station in a wireless-based com- 
naunications system to automatically verify the identity of a 
mobile phone prior to connecting a requested wireless call, 
the method comprising the steps of: 

(a) receiving a request by the mobile phone to the base 
station to connect a wireless. call; 

(b) transmitting, in response to the request a unique 
interrogation address from the base station to the 
mobile phone; : 

(c) fetching from memory in the base station an expected 
code word, the expected code word residing at the 
location specified by the unique interrogation address; 

(d) fetching from memory in the mobile phone a unique 
code word, the unique code word residing at the 45 
location specified by the unique iriteitogation address; 

(e) transmitting the unique code word from the mobile 
phone to the base station; 

(f) verifying that the expected code word fetched firom the 
base station memory is the same as the unique code 
. word received from the mobile phone; 

(g) connecting the requested wireless call only when the 
. code words are the same; and 

(h) denying the requested wireless call when the code 55 
'words are not the same. 

2. The mediod of claini 1 comprising the additional step 
of ■ • ' 

(i) . changing the unique interrogation address prior to a 
subsequent verification whereby the unique code word 60 
fetched from the . mobile phone memory and the 
expected code word fetched from the base station 
memory are different from prior verifications. 

3. The method^of claim 2 in which the interrogation 
address changing step is effected incrementally. 65 

4. The method of claim 2 in which the interrogation 
address changing step is effected pseudo-randomly. 



5. The method of claim 2 comprising the additional step 
of: 

(j) informing the mobile phone that the requested wireless 
call has been denied. 

6. The method of claim 5 comprising the additional steps 

of: 

(k) counting the number of. failed verifications within a 

preset tinie period; and 
(1) alerting the service provider when the number of failed 

verifications within a preset time period is more than a 

preset amount. 

7. In a wireless-based communications system having a 
base station and at least one mobile phone, apparatus for 
automatically verifying the identity of a mobile phone prior 
to cormecting a requested wireless call comprising: 

(a) means in the mobile phone to request the connection 
of a. wireless call: 

(b) means in the base station to generate and transmit a 
unique interrogation address in response to the mobile 
phone request; 

(c) memory means in the base station for storing a set of 
expected unique code words reserved for each mobile 

. phone in the wireless-based system; 

(d) memory means in die mobile phone for storing a set 
of unique code words identical to the set reserved in the 
base station memory means for the particular mobile 
phone; 

(e) means to provide to the base station the unique code 
word froni the mobile phone memory means which 
corresponds to the unique interrogation address; 

(0 means in the base station to compare the mobile phone 
code word with the expected code word from the base 
station memory means which corresponds to the unique 
interrogation address; and 

(g) means for connecting the wireless call only when the 
mobile phone code word is the same as the base station 
expected code word and for denying the connection of 
the wireless call when the mobile phone code word and 
is not the same as the base station expected code word. 

8. The wireless-based communications system of claim 7 
further comprising: 

. (h) means for changing the unique interrogation address 
prior to a subsequent verification whereby the unique 
code word from the mobile phone memory means and 
the expected code word from the base station memory 
are changed from prior verifications. 

9. The wireless-based conmiunications system of claim 8 
in which the address changing means is an incremental 
counter, 

10. The wireless-based conununications system of claim 
8 in which the address changing means is a pseudo-random 
number generator. 

11. The wireless-based communications system of claim 
8 further comprising: 

(i) means for informing the mobile phone that the 
requested wireless call has been denied. 

12. The wireless-based communications system of claim 
11 further comprising:. 

(j) means for counting the number of failed verifications 

within a preset time period; and 
(k) means for alerting the service provider when the 

number of failed verifications within a preset time 

period is more than a preset amount. 

13. In a wireless-based communications system compris- 
ing a plurality of mobile phones and a base station capable 
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of communicating with each of the mobile phones, a system 
for verifying the identity of any of the mobile phones 
wherein: 

(a) each of the mobile phones comprises: 

(i) means to request the connection of a wireless call, 

(ii) means to receive a unique interrogation address 
provided by the base station in response to the 
request, 

(iii) memory means for storing a set of predetermined 
unique code words, and 

(iv) means to provide to the base station a unique 
mobile phone code word from the memory means 
which corresponds to the unique interrogation 
address, and 

(b) the base station comprises: 

(i) means to provide a unique inteirogation address to 
a mobile phone in response to a request by the 
mobile phone to establish a wireless call, 

(ii) means to receive a unique mobile phone code word 
provided by the mobile phone in response to the 
unique interrogation address, 

(iii) memory means for storing a plurality of sets of 
unique expected code words, wherein each set of 
expected code words is identical to a set of unique 
code words stored in memory means in each mobile 
phone, 

(iv) means to compare the expected code word corre- 
sponding to the interrogation address with, the 
received unique mobile phone code word, and 

(v) means to allow the connection of a wireless call 
only when the unique mobile phone code word is the 
same as the expected code word and for disallowing 
the cormection of a wireless call when the unique 
mobil phone code word and is not the same as the 
expected code word. 

14. The wireless-based communications system of claim 

13 wherein the base station further comprises: 

(b)(vi) means for changing the unique interrogation 
address prior to a subsequent verification whereby the 
unique code word from the mobile phone memory 
means and the expected code word from the base 
station memory are changed from prior verifications. 

15. The wireiess-based communications system of claim 

14 in which the address changing means is an incremental 
counter. 

16. The wireless-based communications system of claim 
14 in which the address changing means is a pseudo-random 
number generator. 

17., The wireless-based communications system of claim 
14 wherein the base station further comprises: 

(b)(vii) means for informing the mobile phone that the 
requested wireless call has been denied. 

18. The wireless-based communications system of claim 
17 wherein the base station further comprises: 

(b)(viii) means for counting the number of failed verifi- 
cations within a preset time period; and 

(b)(ix) means for alerting the service provider when the 
number of failed verifications wiOiin a preset time 
period is more than a preset amount 

19. A method for a base station in a wireless telephone 
system to automatically verify the identity of a mobile phone 
prior to connecting the mobile phone with a dialed phone, 
the method comprising the steps of: 

(a) receiving a request by the mobile phone to the base 
station to connect with the dialed phone; 

(b) providing to the base station from the mobile phone a 
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mobile phone number dedicated to the mobile phone 
for identifying to the base station the particular mobile 
phone requesting the phone call; 

(c) fetching from memory in the base station an expected 
PIN and an expected electronic serial number corre- 
sponding to the received mobile phone number; 

(d) transmitting a unique interrogation address from the 
base station to the mobile phone; 

(e) implementing in the base station a predetermined 
algoriUim to generate an expected code word as a 
function of the unique interrogation address and the 
expected PIN; 

(f) implementing in die mobile phone the predetermined 
algorithm to generate a code word as a ftmction of the 
unique interrogation address and the mobile phone 
PIN; 

(g) encrypting in the mobile phone a fint message as a 
function of the electronic serial number and the gen- 
erated code word and a second message as a function 

20 of the dialed phone number and the generated code 
word; 

(h) transmitting the first and second encrypted messages 
to the base station; 

(i) deciphering in the base station the received messages 
by using the expected code word to obtain a deciphered 
electronic serial number and a deciphered dialed phone 
number; 

(j) verifying that the expected mobile phone number 
fetched from the base station memory is the same as the 
deciphered elecu-onic serial number; 
(k) connecting the wireless call with the deciphered dialed 

phone number only when verification passes; and 
0) disallowing die phone call when die verification fails. 
35 20. The method of claim 19 comprising the additional step 
of: 

(m) changing the unique interrogation address prior to a 
subsequent verification whereby the unique code word 
generated by die algorithm in the mobile phone and the 
expected code word generated by the algorithm in the 
base station are different from prior verifications. 

21. The mediod of claim 20 in which the interrogation 
address changing step is effected incrementally. 

22. The method of claim 21 in which the interrogation 
address changing step is effected pseudo-randomly. 

23. The method of claim 20 comprising the additional step 
of: 

(n) informing the mobile phone that the requested wire- 
less call has been denied. 

24. The method of claim 23 comprising the additional 
steps of: 

(o) counting the number of failed verifications within a 

preset time period; and 
(p) alerting die service provider when the number of 
failed verifications widiin a preset time period is more 
than a preset amount 

25. In a wireless-based communications system having a 
base station and at least one mobile phone, apparatus for 
automatically verifying the identity of a mobile phone prior 
to connecting a requested wireless call comprising: 

(a) means in the mobile phone to request the connection 
of a wireless call: 

(b) means in the mobile phone to provide to the base 
station a mobile phone number dedicated to the mobile 
phone for identification of the particular mobile phone 
requesting the call; 
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(c) memory means in the base station for storing an 
expected PIN and an expected electronic serial number 
corresponding to the mobile phone number, for each 
mobile phone in the system; 

(d) means in the base station to generate and transmit a s 
unique interrogation address, in response to the mobile 
phone request; 

(e) means- in the base station to implement a prcdetcr- 
. mined algorithm to generate an expected code word as 
a function of the unique interrogation address and the 
expected PIN corresponding to the mobile phone, num- 
ber received from the mobile phone; 

(f) means in the mobile phone to implement the prede- 
temiined algorithm to generate a code word as a 
function of the unique interrogation address received 
from the base station and of the mobile phone*s PIN; 

' (g) means in the mobile phone to encrypt a first message 
as a function of the ele.clronic serial number, and the 
generated code word and a second message as a func- 20 
tion of the dialed phone number and the generated code 

. word; 

(h) means to transmit the first and second encrypted 
messages to the base station; 

(i) means in the base station to decipher the received 25 
encrypted messages by using the expected code word to 
obtain a deciphered electronic serial number and a 
deciphered dialed phone number; 

(j) means in the base station to verify that the expected 
electronic serial number fetched from the base station 
memory is the same as the deciphered electronic serial 
number; 



12 

(k) means in the base station to connect the wireless call 
with the deciphered dialed phone number only when 
verification passes and to disallow the wireless call 
when the verification fails. 

26. The wireless-based communications system of claim 

25 further comprising: 

(1) means for changing the unique interrogation address 
prior to a subsequent verification whereby the unique 
code word generated by the algorithm in the mobile 
phone and the expected code word generated by the 
algorithm in the base station are different from prior 
verifications. 

27. The wireless-based communications system of claim 

26 in which the address changing means is an incremental 
counter. 

28. The wireless-based communications system of claim 
26 in which the address changing means is a pseudo-random 
number generator. 

29. The wireless-based communications system of claim 
26 further comprising: 

(m) means for informing the mobile phone that the 
requested wireless call has been denied. 

30. The wireless-based communications system of claim 
29 further comprising: 

(n) means for counting the number of failed verifications 

within a preset time period; and 
(o) means for alerting the service provider when the 

number of failed verifications within a preset time 

period is more than a preset amount. 

***** 
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ABSTRACT 



In a cordless telephone system, a master unit adds to a 
registration signal an identification (ID) code assigned to a 
slave unit connectablc to the master unit, a master unit 
transmission password, and an ID code assigned to the 
master unit, and sends the resulting registration signal to the 
slave unit. On receiving the registration signal, the slave unit 
determines whether or not the master unit transmission 
password is identical with a slave unit password stored 
therein. If the former is identical with the latter, the slave 
unit writes the master unit ID code therein, adds the master 
unit ID code, slave unit transmission password, and slave 
unit ID code to an end-of-registration signal, and then sends 
the signal to the master unit On receiving the end-of- 
registration signal, the master unit writes the slave unit ID 
code included in the signal if the slave unit transmission 
password is identical with a password stored therein. 



7 Claims, 8 Drawing Sheets 
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FIG. 1. The master unit executes the procedure shown in 
HG. 5. 

FIG. 8 schematically shows a cordless telephone system 
representative of a fifth embodiment of the present inven- 
tion. As shown, the system includes a main unit 30, a 
plurality of master units 36, and a plurality of slave units, not 
shown. The main unit 30 has a line interface switch 31, a 
controller 32, an operating section 33, and a slave unit ID 
code storage 34. This embodiment is similar to the first 
embodiment except that the main unit 30 is provided witch 
the slave unit ID code storage 34 and the operating section 
33. The system of FIG. 8 is, in principle, operated in the 
same manner as the system of FIG. 1 except that the main 
unit 30 and master units 36 cooperate as if they were the 
master unit 10, FIG. 1. 

In summary, it will be seen that the present invention 
provides a cordless telephone system which eliminates erro- 
neous connection even when a plurality of pairs of master 
and slave units adjoining each other are operated for regis- 
tration at the same time, thereby promoting sure registration. 
In addition, the system ensures safe registration even if the 
ID codes of the units are known to a third party. 

Various modifications will become possible for those 
skilled in the art after receiving the teachings of the present 
disclosure without departing from the scope thereof. For 
example, in the first, second and fifth embodiments, the 
slave unit stores, on receiving a correct registration signal 
from the master unit (main unit), a master unit ID code 
without volatilizing it. Alternatively, in a surer and safer 
procedure, the master unit (main unit) may send, on receiv- 
ing an end-of-registration signal from the slave unit, an 
acknowledge signal to the slave unit and store a slave unit 
ID signal in a nonvolatile manner, in which case the slave 
unit will store the master unit ID code in a nonvolatile 
manner in response to the acknowledge signal. In the third 
and fourth embodiments, the master unit stores, on receiving 
a correct registration signal from the slave unit, a slave unit 
ID code without volatilizing it. These embodiments may be 
modified, for a sureness and safety purpose, such that the 
slave unit sends, on receiving an end-of-registration signal 
from the master unit, an acknowledge signal to the master 
unit and stores a master unit ID signal in a nonvolatile 
fashion, while the master unit stores a slave unit ID code in 
response to the acknowledge signal. 

The illustrative embodiments are arranged such that the 
slave unit ID code storage 16 of the master unit 10, or the 
storage 34 of the main unit 30, and the master unit ID code 
storage 25 of the slave unit 20 are each caused to write the 
ID code of the slave unit or that of the master unit in an idle 
address location thereof. If desired, the user may enter an 
address location number together with the other information 
in the event of registration. This makes it possible to replace 
an ID code registered at a certain address location of the 
storage 16 or 34 with an ID code assigned to a new unit or 
to cancel the registration in the storage 16 or 34. Further- 
more, when a particular extension number is given to each 
slave unit, as in a PBX (Private Branch Exchange), the 
storages 16 and 34 may have the address locations thereof 
managed on an extension number basis; then the user will 
enter an address location number in the form of an extension 
number. 

What is claimed is: 

1, A cordless telephone system comprising: 
a plurality of groups of master units and slave units for 
being connected to each other, and each including 
transmitting/receiving means for interchanging signals 
over a radio channel, 
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said master units and said slave units each comprising 
storing means for storing a master unit ID code and a 
slave unit ID code which are different from each other, 
and control means for controlling said transmitting/ 
receiving means, 

said master units each comprising master unit operating 
means accessible for entering the slave unit ID code 
and a slave unit password assigned to one of said slave 
units to be newly connected to the master unit, and a 
master unit password assigned to said master unit, 

said slave units each comprising slave unit operating 
means accessible for entering the master unit ID code 
and the master unit password assigned to said master 
unit to which said slave unit is to be newly connected, 
and the slave unit password assigned to said slave unit, 

said conux)l means of said master units each comprising 
means for transmitting a registration signal to which are 
added the slave unit ID code and slave unit password 
having been entered, and the master unit ID code stored 
in said master unit; 

said control means of said slave units each comprising 
means for storing, if the slave unit ID code and the 
slave unit password added to the registration signal are 
respectively identical with the slave unit ID code stored 
and the slave unit password entered, said slave unit ID 
code of said registration signal in said storing means, 
and sending an end-of-registration signal to which are 
added the master unit ID code added to said registration 
signal, the master unit entered, and said slave unit ID 
code stored, 

said control means of said master units each further 
comprising means for storing, if the master unit ID 
code and the master unit password added to the end- 
of-registration signal are respectively identical with the 
master unit ID code stored and the master unit pass- 
word entered, the slave unit ID code having been added 
to said end-of-registration signal. 

2. A system as claimed in claim 1. wherein said control 
means of said master unit and said slave unit, which are for 
being connected to each other, respectively further comprise 
means for adding the master unit ID code and the slave unit 
ID code stored to control signals to be interchanged, to 
thereby confirm a unit sent said control signals and a unit to 
receive said control signals, whereby erroneous connection 
is eliminated. 

3. A cordless telephone system comprising: 

a plurahty of groups of master units and slave units for 
being connected to each other, and each including 
transmitting/receiving means for interchanging signals 
over a radio channel, 

said master units and said slave units each comprising 
storing means for storing a master unit ID code arid a 
slave unit ID code which are different firom each other, 
and control means for controlling said transmitting/ 
receiving means, 

said master units each comprising master unit operating 
means accessible for entering the slave unit ID code 
and a slave unit password assigned to one of said slave 
units to be newly connected to the master unit, and a 
master unit password assigned to said master unit, 

said slave units each comprising slave unit operating 
means accessible for entering a master unit password 
assigned to the master unit to which the slave unit is to 
be newly connected, and the slave unit password 
assigned to said slave unit, 

said control means of said master units each comprising 
means for transmitting a registration signal to which are 
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added the slave unit ID code and the slave unit pass- 
word entered, and the master unit ID code stored, 
said control means of said slave units each comprising 
means for storing, if the slave unit ID code and the 
slave unit password added to the registration signal are 5 
respectively identical with the slave unit ID code stored 
and the slave unit password entered, said slave unit ID 
code of said registration signal in said storing means, 
and sending an end-of-registration signal to which are 
added the master unit ID code added to said registration jq 
signal, the master unit password entered, and said slave 
unit ID code stored, 

said control means of said master units each further 
comprising means for storing, if the master unit ID 
code and the master unit password added to the end- 
of-rcgistration signal are respectively identical with the 
master unit ID code stored and the master unit pass- 
word entered, the slave unit ID code having been added 
to said end-of-registration signal. 

4. A cordless telephone system comprising: 

a plurality of groups of master units and slave units for 
being connected to each other, and each including 
transmitting/receiving means for interchanging signals 
over a radio channel, 

said master units and said slave units each comprising 25 
storing means for storing a master unit ID code and a 
slave unit ID code which are different from each other, 
and control means for controlling said transmitting/ 
receiving means, 

said slave units each comprising slave unit operating 30 
means accessible for entering the master unit ID code 
and a master unit password assigned to said master unit 
to which the slave unit is to be newly connected, and 
said slave unit password assigned to said slave unit, 

said master units each comprising master unit operating ^5 
means accessible for entering the slave unit ID code 
and a slave unit password assigned to one of said slave 
units to be newly connected to the master unit, and a 
master unit password assigned to said master unit, 

said control means of said slave units each comprising 
means for transmitting a registration signal to which are 
added the master unit ID code and the slave unit 
password entered, and the slave unit ID code assigned 
to the slave imit, 

45 

said control means of said master units each comprising 
means for storing, if the master unit ID code and the 
master unit password added to the registration signal 
are respectively identical with the master unit ID code 
stored and the master unit password entered, the slave 
unit ID code of said registration signal in said storing 
means, and sending an end-of-registration signal to 
which are added said slave unit ID code and the slave 
unit password entered, and said master unit ID code 
stored, 

said control means of said slave units each further com- 
prising means for storing, if the slave unit ID code and 
the slave unit password added to the end-of-registration 
signal arc respectively identical with the slave unit ID 
code stored and the slave unit password entered, the 
master unit ID code having been added to said end-of- 
registration signal. 

5. A cordless telephone system comprising: 

a plurality of master units and a plurality of slave units for 
being connected to each other, and each including 65 
transmitting/receiving means for interchanging signals 
over a radio channel, 
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said master units and said slave units each comprising 
storing means for storing a master unit ID code and a 
slave unit ID code which are different from each other, 
and control means for controlling said transmitting/ 
receiving means, 

said slave units each comprising slave unit operating 
means accessible for entering the master unit ID code 
and a master unit password assigned to the master unit 
to which the slave unit is to be newly connected, and a 
slave unit password assigned to said slave unit, 

said master units each comprising master unit operating 
means accessible for entering the slave unit ID code 
assigned to the slave unit which is to be newly con- 
nected to the master unit, and a master unit password 
assigned to said master unit, 

said control means of said slave units each comprising 
means for transmitting a registration signal to which are 
added the master unit ID code entered and the master 
unit password entered, and the slave unit ID code 
stored, 

said control means of said master units each comprising 
means for storing, if the master unit ID code and the 
master unit password added to the registration signal 
are respectively identical with the master unit ID code 
stored and the master unit password entered, the slave 
unit ID code of said registration signal in said storing 
means, and sending an end-of-registration signal to 
which are added the slave imit ID code added to said 
registration signal, the slave unit password entered, and 
said master unit ID code stored, 

said control means of said slave units each further com- 
prising means for storing, if the slave unit ID code and 
the slave unit password added to the end-of-registration 
signal are respectively identical with the slave unit ID 
code stored and the slave unit password entered, the 
master unit ID code having been added to said end-of- 
registration signal. 

6. A cordless telephone system comprising: 

a plurality of groups of master units and slave units for 
being connected to each other and each including 
transmitting/receiving means for interchanging signals 
over a radio channel and transmission/reception control 
means for controlling said transmitting/receiving 
means, and a main unit including a line interface switch 
connected to said master units by respective wired 
channels and switch control means for controlling said 
line interface switch, 

said slave units each comprising slave unit storing means 
for storing a master unit ID code assigned to the master 
unit, to which the slave unit is conneciable, and a slave 
unit ID code of said slave unit which is different from 
said master imit ID code, 

said main unit comprising main unit storing means for 
storing the slave unit ID code of the slave imit con- 
nectable to the master unit, 

said master units each comprising master unit storing 
means for storing the master unit ID code assigned 
thereto, 

said main unit comprising main unit operating means 
accessible for entering the slave unit ID code and a 
slave unit password assigned to one of said slave units 
to be newly connected, and a main unit password, 

said switch control means comprising means for output- 
ting a registration signal to which are added the slave 
unit ID code and the slave unit password entered, 
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said transmission/reception control means of said master 
units each comprising means for transmitting the reg- 
istration signal by adding the master unit ID code 
stored, 

said slave units each comprising slave unit operating 5 
means accessible for entering the master unit ID code 
assigned to the master unit to which the slave unit is to 
be newly connected, a main unit password, and the 
slave unit password assigned to said slave unit, 

said transmission/reception control means of said slave 
units each comprising means for storing, if the slave 
unit ID code and the slave unit password added to the 
registration signal are respectively identical with the 
slave unit ID code stored and the slave unit password 
entered, the master unit ID code of said registration 
signal in said storing means, and means for sending an 
end-of-registration signal to which are added said mas- 
ter utiit ID code and the main unit password entered, 
and the slave unit ID code stored. 
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said transmission/reception control means of said master 
units each further comprising means for receiving the 
end-of-registration signal including the master unit ID 
code stored, 

said switch control means further comprising means for 
storing, if the main unit password added to the end-of- 
registration signal received is identical with the main 
unit password entered, the slave unit ID code having 
been added to said end-of-registration signal. 
7. A system as claimed in claim 6, wherein said switch 
control means, said transmission/reception control means of 
said master units, and said transmission/reception control 
means of said slave units further comprise means for adding 
the master unit ID code and the slave unit ID code stored to 
control signals to be interchanged, to thereby confirm a unit 
sent said control signals and a unit to receive said control 
signals, whereby erroneous connection is eliminated. 
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Uplink detection of scheduled mobile involves reserving resource for 
transmission regardless of whether packet has been correctly received, 
once identity of mobile station has been verified 



Abstract (Basic) : 

... A base station reserves a resource for transmission of at 

least one subsequent packet from a mobile station regardless of 
whether a packet has been correctly received from the mobile station, 
if the correlation between stored data and the packet verifies the 
identity of the mobile station. 

The method starts with the base station storing data 
associated with the mobile station from a first packet data 
transaction. The base station then determines if the packet from 
the mobile station for starting a second packet data transaction has 
been correctly received. The stored data are correlated with the 
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...For radio communication system... 

...Minimizes battery consumption by mobile station during real-time 

applications while minimizing delay response times... 
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(57) ABSTRACT 

The present invention provides a method and system for 
reducing the delay of the transmission of packet data includ- 
ing storing, by a base station, data associated with a mobile 
station from a first packet data transaction. A packet for 
starting a second packet data transaction is received from a 
mobile station and the base station determines whether or 
not the packet has been correctly received. The base station 
correlates at least one field in the packet with the stored data. 
If the base station is able to identify the mobile station based 
on the correlation with the stored data, then the base station 
reserves a resource for transmission of a subsequent packet 
from the mobile station regardless of whether or not the 
packet has been conectly received. 

21 Claims, 7 Drawing Sheets 
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FIG. 5 illustrates an exemplary signal diagram between 
the base station and the mobile station operating in FPM. 
The base station (BS) has reserved predetermined uplink and 
downlink time slots for the mobile station (MS) as trans- 
mission opportunities with a predetermined periodicity. 5 
When the mobile station has uplink data to send to the base 
station, it sends, at its scheduled uplink time slot, a signal 
550 containing packet 430 (see FIG. 4) indicating in the 
PDU type field 432 that the packet is a Begin frame. The 
base station uses the value of the CRC field 442 to verify the lO 
information in the packet. 

If the base station cannot verify the information in the 
packet, the base station sends a non-acknowledgment mes- 
sage 552 to the mobile station. At the next scheduled 
opportunity in FPM, the mobile station will retransmit 554 15 
the packet 430. If, after retransmission the packet is verified, 
then the base station returns an acknowledgment message 
556, receives the first data field 440, and receives the 
remaining packets in active mode (illustrated as signal 558). 

A decay in the QoS of a communication may occur in the 
case where the mobile station must wait until the next 
scheduled opportunity to retransmit its Begin frame. 
However, in an alternate embodiment of the present 
invention, this potential decay can be mitigated by taking 
advantage of the structure of the packet 430. For example, 
for a given mobile station, at least one of, and possibly all 
of the MSID field 434, mobile station capability field 436, 
and modulation proposal field 438 have the same value for 
each packet sent by the same mobile station. 

The base station therefore, can store these known values 
from an earlier communication (a previous active mode 
communication or a request from the mobile station to enter 
FPM) with the mobile station in order to anticipate the 
above-mentioned fields for future communications. In 
addition, if the base station is anticipating a Begin frame 
from the mobile station (e.g., during FPM), then when the 
mobile station sends the Begin frame, the PDU type field 
432 is also known by the base station. 

The present invention takes advantage of the base sta- 
lion's ability to anticipate the values of the fields which 
precede the data field 440 so that the base station can 
correlate the received known packet field values with stored 
values firom a previous communication with the mobile 
station. In this way, even if the CRC fails and the data cannot 45 
be reliably decoded, if the base station was able to correlate 
the values received in one or more of, for example, fields 
432, 434, 436 and 438 from a previous transaction, then the 
base station would know that the specific mobile station 
attempted to establish a MAC transaction. One skilled in the 
art will recognize that the base station can correlate to any 
combination or portion of the fields 432-438 to identify the 
packet's originator. However, the accuracy of the correlation 
will be dependent on the number of bits correlated. 

An exemplary method of correlating the packet fields is to 55 
perform a bit by bit comparison of the received data. If a 
predetermined number of bits match, then the base station 
can assume that the two packet fields match. One skilled in 
the art will recognize that the percentage of bits required for 
a match is dependent on the desired tolerance of the system 
which may, for example, be based on the total number of 
mobile stations and/or the length of the packet fields. 

FIG. 6 illustrates an exemplary signal diagram between a 
base station and a mobile station applying the above tech- 
nique. The base station (BS) has reserved predetermined 65 
uphnk and downlink time slots for the mobile station (MS) 
as transmission opportunities with a predetermined period- 
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icity. When the mobile station has uplink data to send to the 
base station, it sends at its scheduled uplink time slot, a 
signal 650 containing packet 430 (see FIG. 4) indicating in 
the PDU type field 432 that the packet is a Begin frame. The 
base station uses the value of the CRC frame 442 to verify 
the information in the packet. 

In an exemplary embodiment of the present invention, if 
the base station cannot verify the information in the packet, 
the base station sends a non-acknowledgment message 652 
to the mobile station. However, in this case, since the base 
station has reserved this opportunity for the mobile station, 
it assumes that the communication received, even if it the 
data cannot be decoded, is from the mobile station. The base 
station then attempts to correlate the stored values of the 
MSID, PDU Type, MS Capabihty, and Modulation Proposal 
frames (432-438) with the received values from the signal 
650. If the base station is able to correlate the above values, 
then the base station schedules the mobile station to retrans- 
mit the data in active mode, rather than waiting to receive 
another Begin frame in FPM. Allowing the mobile station to 
enter active mode without having to wait for the next 
reserved time slot in FPM reduces the delay for the trans- 
mission of the packet, thereby providing a higher QoS. The 
mobile station resends the Begin frame signal 650 at the 
newly scheduled time slot and the base station acknowl- 
edges the receipt of the signal with an acknowledgment 
signal 654. The remaining packets are subsequently sent and 
acknowledged (represented by signals 660 and 654, 
respectively) in active mode. 

In an alternate embodiment of the present invention, the 
mobile station sends the Begin frame in response to a signal 
from the base station including the mobile station identifi- 
cation number indicating the occurrence of an uplink sched- 
uling opportunity for the mobile station. Furthermore, while 
the above-described embodiments were provided using 
FPM as an exemplary protocol for the present invention, one 
skilled in the art will appreciate that the present invention 
may be practiced under numerous wireless communication 
protocols. For example, the signal from the base station may 
be sent to the mobile station while the mobile station is in 
active mode, FPM, or sleep mode. 

The foregoing has described the principles, preferred 
embodiments and modes of operation of the present inven- 
tion. However, the invention should not be construed as 
being hmited to the particular embodiments discussed 
above. While the above-described embodiments were pro- 
vided using TDM A, one skilled in the art will appreciate that 
the present invention may be practiced in any of a number 
of difirerent protocols such as CDMA, FDMA, TDD, etc. 
Thus, the above-described embodiments should be regarded 
as illustrative rather than restrictive, and it should be appre- 
ciated that variations may be made in those embodiments by 
workers skilled in the art without departing from the scope 
of the present invention as defined by the following claims. 

What is claimed is: 

1. A method for transmiuing packet data in a radiocom- 
munication system comprising the steps of: 
storing, by a base station, data associated with a mobile 

station from a first packet data transaction; 
receiving, from said mobile station, a packet for starting 

a second packet data transaction; 
determining, by said base station, whether said packet has 

been correctly received; 
correlating said stored data with at least one field in said 

packet; and 

reserving, by said base station, a resource for transmission 
of at least one subsequent packet from said mobile 
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Station regardless of whether said packet has been 
correctly received if said step of correlating verifies an 
identity of said mobile station. 

2. The method of claim 1, wherein said step of storing 
data stored a mobile identification number field. 5 

3. The method of claim 1, wherein said step of determin- 
ing is based on a checksum value. 

4. The method of claim 1, wherein step of reserving said 
resource assigns at least one time slot. 

5. The method of claim 1, wherein said step of receiving lo 
receives said packet during a fast page mode time slot. 

6. The method of claim 1, said method further comprising 
the step of: 

transmitting, by said base station, a transmission oppor- 
tunity message to said mobile station, wherein said 15 
packet from said mobile station is received in response 
to said transmission opportunity message. 

7. The method of claim 6, wherein said transmitting step 
transmits said transmission opportunity message in an active 
mode. 20 

8. The method of claim 6, wherein said transmitting step 
transmits said transmission opportunity message in a fast 
page mode. 

9. The method of claim 6, wherein said transmitting step 
transmits said transmission opportunity message while said 25 
mobile station is in a sleep mode. 

10. A method for reducing the delay of the transmission 
of packet data comprising: 

receiving a packet, said packet including a first portion, a 

second portion, and a packet type field said second 

portion including a checksum; 
decoding the contents of the packet; 
verifying the accuracy of the contents based on said 

checksum; 35 
comparing said first portion of said packet with a stored 

portion if said verifying step indicates an error in the 

decoding step; and 
assigning a time slot for the receipt of an additional packet 

if said first portion matches said stored portion. 

11. The method of claim 10, wherein said first portion and 
said stored portion include a mobile identification number 
field. 

12. The method of claim 10, wherein said first portion and 
said stored portion include at least one of a mobile station 
capability field and a modulation proposal field. 
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13. The method of claim 10, wherein said comparing step 
compares said first portion and said packet data field with 
said stored portion. 

14. The method of claim 10, wherein said packet is 
received in a first mode and wherein said time slot is 
assigned for a second mode. 

15. The method of claim 14, wherein said first mode is a 
fast page mode and wherein said second mode is an active 
mode. 

16. The method of claim 10, wherein said first portion and 
said stored portion each comprise a predetermined number 
of bits, said comparing step further comprising: 

comparing each bit of said first portion with said second 
portion, 

indicating that said first portion matches said second 
portion if a respective predetermined number of bits 
match from said first portion and said second portion. 

17. A base station comprising: 

a transceiver for receiving a data packet from a mobile 
station, said data packet including a first portion, a 
second portion, and a packet type field; 

decoding the means for decoding contents of the packet; 

verifying means for verifying the accuracy of the contents 
based on a checksum; and 

a processor for comparing said first portion of said data 
packet with a stored portion if said verifying means 
indicates an error in the decoding of the packet 
contents, 

wherein said processor assigns a time slot for the receipt 
of an additional packet if said first portion matches said 
stored portion. 

18. The base station of claim 17, wherein said first portion 
and said stored portion comprise a mobile identification 
number field. 

19. 'ITie base station of claim 17, wherein said first portion 
and said stored portion comprise at least one of a mobile 
station capability field and a modulation proposal field. 

20. The base station of claim 17, wherein said processor 
compares said packet type field and said first portion with 
said stored portion. 

21. The base station of claim 17, wherein said second 
portion includes a checksum. 

* * 4c :tc 4c 
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..assigns tenant identifications to all radio terminals such that 
connection to line controller is selectively enabled according to service 
area 



. . .Abstract (Basic) : The communication area is divided into a number of 
radio zones, each with a radio base station connected to a line 
controller linked to subscriber lines. Radio terminals communicate 
with the base stations, both having stored tennant identification data. 
Before any radio channel is set up a radio terminal transmits its 
tenant identification to the base station. . . 

...employed, such that a given zone may be designated a common zone in 
which all radio terminals may operate. A selected radio terminal 
may also be recognised in all zones... 

...USE - Provides radio communication system capable of limiting service 

area, esp. on company basis... 
. . .Abstract (Equivalent) : The cordless telephone or similar radio 

communication system has a service area divided into a number of radio 
zones and comprises a radio base station assigned to each of 

the radio zones and connected to a line controller connected to 



subscriber lines which extend from a public switched telephone network, 
and a number of radio terminals connectable to the radio base 
station over a radio channel. The radio base station and radio 
terminals each comprises a tenant identification { ID ) data 
storage for storing tenant ID data... 

The radio terminals each comprise a tenant ID data transmitting 
section for transmitting, before the radio channel is set up, the 
tenant ID data read out of the tenant ID data storing section to the 
radio base station. The radio base station comprises a radio 
channel connecting section for comparing the received tenant ID data 
with the tenant ID data assigned to the radio base station 
and, if the two tenant ID data are identical, setting up the radio 
channel . . . 

USE/ADVANTAGE - Limits service available for mobile unit or radio 
terminal in exclusive zone assigned to terminal and removes limitation 
in common zone while opening all zones to particular radio terminal. 
All terminals belonging to respective companies are serviced at 
restaurant, lobby or similar common... 
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[57] ABSTRACT 

A cordless telephone system or similar mobile radio 
communication system which limits the service avail- 
able for a mobile unit or radio terminal in an exclusive 
zone assigned to the terminal and removes the limitation 
in a common zone while opening all the zones to a 
particular radio terminal. Assuming a single building 
accommodating a plurality of companies, the area 
where radio terminals can be serviced is limited on a 
companay basis. All the terminals belonging to the re- 
spective companies are serviced at a restaurant, lobby 
or similar common space inside the building. An exclu- 
sive terminal for a guard, for example, is serviced in all 
the arears inside the building. 

3 ClaimSf 7 Drawing Sheets 
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serviced on a company basis, allows all the terminals 
belonging to respective companies to be serviced at a 
restaurant, lobby or similar common space, and allows 
an exclusive terminal for a guard, for example, to be 
serviced in all the arears inside the building. 5 

Various modifications will become possible for those 
skilled in the art after receiving the teachings of the 
present disclosure without departing from the scope 
thereof. 

What is claimed is: 10 
1. A mobile radio communication system having a 
service area divided into a plurality of radio zones and 
comprising a radio base station assigned to each of said 
plurahty of radio zones, each of said radio base stations 
being connected to a line controller which is connected 15 
to subscriber lines which extend from a public switched 
telephone network, and a plurality of radio terminals 
which are connected to said radio base stations over a 
radio channel, said radio base stations each comprising 
first tenant identification (ID) data storing means for 20 
storing first tenant ID data, said first tenant ID data 
indicating at least one service group of said radio termi- 
nals, and said radio terminals each comprising second 
tenant ID data storing means for storing second tenant 
ID data, said second tenant ID data indicating a particu- 25 
lax one of said service groups to which the radio termi- 
nals belong; 

said radio terminals each comprising tenant ID data 
transmitting means for transmitting, before a con- 
nection of a radio channel is set up, the second 30 
tenant ID data, read out of said second tenant ID 
data storing means, to said radio base station; 



608 

6 

each of said radio base stations comprising radio 
channel connecting means for comparing the sec- 
ond tenant ID data received from said tenant ID 
data transmitting means of a particular one of said 
radio terminals with the first tenant ID data stored 
in said first tenant ID data storing means thereof 
and, if the first and second tenant ID data are iden- 
tical, said radio channel connecting means causes a 
setting means to set up a connection of the radio 
channel between an associated one of said base 
stations and a particular one of said radio terminals, 
if the first and second tenant ID data are not identi- 
cal, said radio channel connecting means prohibits 
a connection of the radio channel between the 
associated one of said base stations and the particu- 
lar one of said radio termrnals. 

2. A mobile radio communication system as claimed 
in claim 1, further comprising: 

first executing means for causing said setting means to 
set up a radio channel connection if the second 
tenant ID data received from one of said second 
tenant ID data storing means of said radio termi- 
nals has a first predetermined value; and 

second executing means for causing said settmg 
means to set up a radio chaimel connection if the 
first tenant ID data stored in said first tenant identi- 
fication data storing means associated with said 
radio base station has a second value. 

3, A system as claiined in claim 1 wherein one com- 
mon control chaimel is serviced for each of said radio 
terminals. 

« * * « * 
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reducing the number of times of hand-over 
than as before. SOLUTION: On the way of 
movement of a mobile station from a base 
station CS4 in the direction of a base station 
CS6 through a radio zone, in the case that 



hand-over is applied to a cell end (position of 
CS5) of the base station CS4, the mobile 
station compares each newest base station 
identifier (CD-ID of CS 2, 4, 5, 6, 8) included in 
an outgoing control signal with each base 
station identifier (CS-ID of GS1 , 4, 5, 7, 1 0) 
stored at a preceding time and the collated 
base station identifier (CS-ID 4, 5) from a base 
station selection list and a base station CS6 
where a reception level of an outgoing signal is 
monotonously increased and whose reception 
level is lowest is selected as a hand-over 
destination base station among the base 
stations whose identifier (CS-ID 2, 6. 8) left in 
the base station selection list. 
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ABSTRACT 

. . . under an existing number plan in respect to a channel setting control 
system for a mobile communication system. . . 

...SOLUTION: Tlnis channel setting control system is provided with a base 
station 11 for sending a number applied by an incoming call selection 
signal through an inter-station signal line to a radio zone and 
controlling the channel setting of mobile stations in the radio zone 
and plural mobile stations 12 (sub 1) to 12 (sub n) each of which 

compares the number sent from the base station 11 with a mobile 
station number previously allocated to the station itself, and when both 
the numbers coincide with each other, receiving communication service 
based upon a channel setting control procedure. Each slave station 12 is 
provided with a call detection control means 13 including the 
identification ( ID ) numbers of base stations forming the radio 
zone in which the station itself can receive communication service and 
using a unique annexed mobile station number allocated to the station 
itself as a comparing object and the ID number of the base station 11 
is allocated to an inter-station signal line as an office number. 
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Abstract of JP9037338 

PROBLEM TO BE SOLVED: To inexpensively 
and surely apply a direct dialing system under 
an existing number plan in respect to a 
channel setting control system for a mobile 
communication system. SOLUTION: This 
channel setting control system is provided with 
a base station 1 1 for sending a number 
applied by an incoming call selection signal 
through an inter-station signal line to a radio 
zone and controlling the channel setting of 
mobile stations in the radio zone and plural 
mobile stations 121 to 12n each of which 
compares the number sent from the base 
station 1 1 with a mobile station number 
previously allocated to the station itself, and 
when both the numbers coincide with each 
other, receiving communication service based 
upon a channel setting control procedure. 
Each slave station 12 is provided with a call 
detection control means 13 including the 
identification(ID) numbers of base stations 
forming the radio zone in which the station 
itself can receive communication service and 
using a unique annexed mobile station number 
allocated to the station itself as a comparing 
object and the ID number of the base station 
1 1 is allocated to an inter-station signal line as 
an office number. 
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